|
From: | Jim Hyslop |
Subject: | Re: [task #4633] GPG-Signed Commits |
Date: | Fri, 23 Sep 2005 16:39:29 -0400 |
User-agent: | Mozilla Thunderbird 1.0.6 (Windows/20050716) |
Derek Price wrote:
Just a quick RFC on how this will integrate into the CVS command line & config. I'm thinking that signing will be off by default, with a simple `-g' global option to enable it.
Sounds reasonable. If and when signed commits become standard practise, would we make signing the default, and require a '-g-' to turn it off, or will this be the default in perpetuity?
Since adding -g to a .cvsrc might not be acceptable for users that work with multiple roots, I think this should also be implemented as a method option that can be added to a CVSROOT string <http://ximbiot.com/cvs/wiki/index.php?title=CVS--Concurrent_Versions_System_v1.12.12.1:_The_Repository#The_connection_method>.
What would the option be? In keeping with Mark's later comments, we probably don't want 'gpg' in it, so 'gpg-sign' would probably not be the best option. I'm thinking 'sign-id=user-id'. On my home system, for example, my CVS user ID is 'jim', so I'd have to specify which PGP key to use.
Example: CVSROOT=:local;sign-id=jhyslop@dreampossible.ca:/cvs -- Jim
[Prev in Thread] | Current Thread | [Next in Thread] |