Hi Alexander,

Darcs currently does not support signing data inside of repositories.

It does only provide *patch bundle* signing in the "darcs send"
command and checking the signature in "darcs apply".

Now, patch signing in Darcs seems dificult to implement because
context changes modify the actual contents of patches. That is, for a
given patch, there are many possible contexts for it. In theory it
would be possible to sign any patch by finding its minimal context and
signing its contents against that context, maybe that would be too
slow to compute for practical uses, or maybe not.

What I think would be easier to do, would be signing tags. Since tags
have no content, the idea would be to sign the pristine tree
associated to some tag, and the signature would be written in the long
description of the tag.

Guillaume



2016-09-08 17:21 GMT-03:00 Alexander Berntsen <alexan...@plaimi.net>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> As a lowly wannabe user, I have one request. I want to verify that
> things have been OpenPGP signed, e.g. with 'darcs log'. See 'git log
> - --show-signature' for an example. I just want better OpenPGP-interop
> in general. If satisfactory OpenPGP-interop is been achieved, I will
> have no qualms just using darcs for my everyday work.
>
> Thank you for your consideration.
> - --
> Alexander
> alexan...@plaimi.net
> https://secure.plaimi.net/~alexander
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQIcBAEBCgAGBQJX0cgxAAoJENQqWdRUGk8BTsYP/0IRxSCc7GX6yDrhNndTzDic
> BcqywCSy/mn92dWeZE/LNNYRrCHmU5n8lkHo1S1Ic1Az8JUD7BwuNwfNEY+yX+f0
> cqe2VWWgGzNel3WHNLHktsTLx4KMd3Hp0hb+9wIGH72JprvA3/IKE300oX68Mmep
> vOzG7dzplv3RAm+tTWaQMat/SVTfG66b17ZW7IJ4kCGTUYnYkbEIMXkt2b5TShRD
> zCn1y7u7cixAMD2dc8akwHR/Zs22swk3xTUFXuYYJRxUwS036++IRYQvzOhrg7/1
> PpJBvPsiWinL2ca4RyO9jqm5DdhLLYj3bRyrPn4SOze447Td63lYdAECBwhvbigX
> JmP3f+uCrJPDDq3WSqciJYO1uFZy6A9psq7uaN5LdMCRLTBePFXTYUyOypVpdd3/
> xZ1WstSvrFFQTRVJ/6Px6lo77dDYvWE1NQLEAEHUpzykP4KZXXGnSEiq+7mK1P/w
> cONBNy/ijHKxsJQS494JY96XktrP8SO5RiMEEE64ILi/Ug5GLQZsdZLUlLsL9hD8
> iWOHr78ni7q1t3X1+9w2cBUR578SHIAHFOG4jNbAO1BIeP44jJsWvBPFWgLyw25Y
> XTExMzxR29AhCDPRU8ghwxKo7XNOt4O8L1J1B/gt+QkcQeGJl2beLKAgHg0IV61b
> ASpOvXF3P74YdMRXk8ga
> =lq/V
> -----END PGP SIGNATURE-----
> _______________________________________________
> darcs-users mailing list
> darcs-users@darcs.net
> http://lists.osuosl.org/mailman/listinfo/darcs-users
_______________________________________________
darcs-users mailing list
darcs-users@darcs.net
http://lists.osuosl.org/mailman/listinfo/darcs-users

Reply via email to