Re: [fossil-users] commit signing

2013-08-24 Thread Stephan Beal
On Sat, Aug 24, 2013 at 10:30 PM, Eric Rubin-Smith wrote: > You should be careful how you render things like that. I think now a > malicious user Mallory can easily subvert your scheme by appending the text > " (*PGP SIGNED*)" to the end of his unsigned check-in comment. People will > think he h

Re: [fossil-users] commit signing

2013-08-24 Thread Eric Rubin-Smith
> > [507ee45f25] Fix an off-by-one > bug in the network protocol handler so that it can accept a zero-length > file. (*PGP SIGNED*) (user: > drh, > tags: > trunk

Re: [fossil-users] Control artifact types [Was: Minor new feature: comments when closing/re-opening]

2013-08-24 Thread Stephan Beal
On Sat, Aug 24, 2013 at 12:57 PM, Gour wrote: > I haven't read the whole thread, but can someone jsut provide "tl;dr" > explanation what is the objective of this recent development in Fossil? > Independently of one another Jan and i have been going through the manifest-parsing/generating related

Re: [fossil-users] Control artifact types [Was: Minor new feature: comments when closing/re-opening]

2013-08-24 Thread Gour
On Fri, 23 Aug 2013 15:06:27 -0400 Richard Hipp wrote: > Yes, it is theoretically possible that a Manifest could lack all > three card types, but that never happens in actual practice. And > were it to come up in the future, the misclassification is mostly > harmless. I haven't read the whole t