Re: RFC: Cryptographic attestation for email-based patch workflows

2019-09-30 Thread Konstantin Ryabitsev
On Fri, Sep 27, 2019 at 08:24:37AM -0700, d...@linuxprogrammer.org wrote: - generate a signify-compatible cryptographic signature of the verbatim patch content, perhaps slightly normalized for things like LF vs. CRLF line endings (see minisign/libsodium for crypto details) - include both the sig

Re: RFC: Cryptographic attestation for email-based patch workflows

2019-09-27 Thread dwh
On 10.09.2019 08:13, Konstantin Ryabitsev wrote: # Proposed approach I recommend that we provide a way to include cryptographic signature information natively using git-format-patch, using roughly the following process: - generate a signify-compatible cryptographic signature of the verbatim pa

RFC: Cryptographic attestation for email-based patch workflows

2019-09-10 Thread Konstantin Ryabitsev
Hello, all: This is a very "raw" idea that stems from a handful of conversations that took place at the Kernel Summit. I wanted to pass it along to this list in hopes that it can generate some workable ideas (or shot down and allowed to die early). # Problem One of the recurring concerns raised