On 08/07/2013 09:55 PM, Robin H. Johnson wrote: > On Tue, Aug 06, 2013 at 10:32:39AM -0400, Alex Xu wrote: >> AFAIK, the status is "unimplemented, and nobody's working on it". > No, I did post implementation patches for much of it back when the GLEPs > were in process. The overwhelming message from other devs at the time > was that it should happen at the same time or shortly after the Git > migration, and that in the short-term, if you needed that security, you > should be using the signed portage snapshot tarballs. >
So the git migration IS actually a blocker? Do we really expect it to happen? Should we wait? Why? I'd say let's push for it. I am willing to do a lot of testing.
