If I run:

[EMAIL PROTECTED] mmm]$ darcs push --sign 
[EMAIL PROTECTED]:/home/darcs/mmm/unstable
darcs: Signing doesn't make sense for local repositories or when pushing over 
ssh.

I am surprised by this message. push have --sign option, but I don't see any 
other way to push patch except using ssh or on a local repos.

In fact I don't why it is useless to sign patch. The signature allow to 
certify the patch has been really made by me. So can be use by anyone wanting 
to check repos is not corrupted, can be usefull for some critical project 
like ssh, gnupg or other security tools.

IIRC, when darcs apply the patch on the destination repos, it is disassemble 
and rewrite, and so the rewritten patch cannot be resign of course. This 
maybe explain why it is useless. Am I wrong ?

Would be nice if signed patches can be stored in repos in futur version.

Regards.

Attachment: pgpyNNNIrZBYx.pgp
Description: PGP signature

_______________________________________________
darcs-devel mailing list
[email protected]
http://www.abridgegame.org/cgi-bin/mailman/listinfo/darcs-devel

Reply via email to