Re: [Gnu-arch-users] Re: darcs vs tla

[Jan Hudec]

On Tue, Nov 16, 2004 at 21:03:26 +0100, Karel Gardas wrote:
> On Tue, 16 Nov 2004, Jan Hudec wrote:
> 
> > > - darcs does not support patch signing/verification except simple
> > >   email-based transport method (showstopper for me)
> >
> > Arch does not support signing/verification for transport -- it supports
> > it for STORAGE. That's the key point. The signatures are stored and can
> > be validated at any point in future. Eg. after a security accident.
> 
> Yes, true, sorry for not so precise definition. The most important thing
> is that signing/verification is transport independend while this is not
> the case in darcs. In addition darcs patches are not signed in repository
> but on export (by send command), which is showstopper about which I wrote.

Yes. That is completely useless for checking integrity of your
repository after the computer was compromised or when your harddisk is
dying.

-------------------------------------------------------------------------------
                                                 Jan 'Bulb' Hudec 
<address@hidden>

signature.asc
Description: Digital signature