List Archive: gentoo-portage-dev
Note: Due to technical difficulties, the Archives are currently not up to date.
provides an alternative service for most mailing lists.c.f. bug 424647
On Tue, Sep 13, 2011 at 03:20:35AM +0000, Zac Medico wrote:
> commit: 677240f7b3db66bdcd403c214e5d3fa30e31a24a
> Author: Zac Medico <zmedico <AT> gentoo <DOT> org>
> AuthorDate: Tue Sep 13 03:20:00 2011 +0000
> Commit: Zac Medico <zmedico <AT> gentoo <DOT> org>
> CommitDate: Tue Sep 13 03:20:00 2011 +0000
> URL: http://git.overlays.gentoo.org/gitweb/?p=proj/portage.git;a=commit;h=677240f7
> repoman: don't sign thin manifests
> Thin manifests imply reliance on the VCS for file integrity,
> which implies that manifest signatures are not needed.
This is only true after the VCS has signed commits.
If the VCS does not have signed commits, then we should have this
Robin Hugh Johnson
Gentoo Linux: Developer, Trustee & Infrastructure Lead
E-Mail : email@example.com
GnuPG FP : 11AC BA4F 4778 E3F6 E4ED F38E B27B 944E 3488 4E85