Dirkjan Ochtman <dirk...@ochtman.nl> writes:

> - http://bitbucket.org/mg/commitsigs is another extension, which takes
> a different tack to signing (I believe it doesn't sign the commit
> metadata, only the file tree, which lets it sign before the commit is
> finished, meaning it doesn't take up an extra cset).

It does signs the complete changeset hash including the commit message,
username, etc, and it does this without creating an extra changeset.

This is done by computing what the changeset hash would be without an
embedded signature. This hash is then signed and embedded in the
changeset. This is similar to how TCP checksums are computed.

This increases the size of each changeset by about 2 KB of data which
cannot be compressed -- this adds up over time and I would only advice
people to use the extension if they are very paranoid or have special
legal requirements.

-- 
Martin Geisler

Mercurial links: http://mercurial.ch/

Attachment: pgpQIiKj4dVLR.pgp
Description: PGP signature

_______________________________________________
Python-Dev mailing list
Python-Dev@python.org
http://mail.python.org/mailman/listinfo/python-dev
Unsubscribe: 
http://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com

Reply via email to