Re: [Monotone-devel] Re: linus talk on git

[Bruce Stephens]

"Justin Patrin" <address@hidden> writes:

[...]

> It soundes like Linus said that security is not built into git at all.
> Security is implicitly assumed through your network of trust with the
> people you pull from.

Technically, I believe one can PGP-sign certain significant things.

But yeah, which PGP signatures you trust and so on is outside the
system.  Just as whose key you trust in monotone is outside the system
(and which CA certificates you trust in an X.509 PKI is outside the
system itself).