linux-kernel - Re: [git patches] libata updates, GPG signed (but see admin notes)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <4EAC538D.10606@garzik.org>
Date:	Sat, 29 Oct 2011 15:27:09 -0400
From:	Jeff Garzik <jeff@...zik.org>
To:	Valdis.Kletnieks@...edu
CC:	Andrew Morton <akpm@...ux-foundation.org>,
	Linus Torvalds <torvalds@...ux-foundation.org>,
	linux-ide@...r.kernel.org, LKML <linux-kernel@...r.kernel.org>
Subject: Re: [git patches] libata updates, GPG signed (but see admin notes)

On 10/29/2011 03:13 PM, Valdis.Kletnieks@...edu wrote:
> On Wed, 26 Oct 2011 16:22:35 EDT, Jeff Garzik said:
>
>>     For this reason, I am tempted to modify my new, GPG-signed pull request
>>     template as follows, for subsequent pull requests:
>>
>> 	---<begin GPG signed text>---
>>
>>     	pull req description
>>
>> 	"Please pull from $branch\n$url $branch"
>>
>> 	"Top of tree is $sha1_commit"
>>
>> 	---<end GPG signed text>---
>>
>> 	diffstat
>> 	diff
>
> Note that this can be problematic as well - there's probably a lot of tools out there
> that will be less than gracious when presented with a GPG-signed text with non-signed
> trailing text.  Maybe GPG-sign from "pull request" to "diffstat" and make the diff an
> attachment? (That would also allow attaching a gzip'ed diff, which would save vger's
> bandwidth :)

I'm not sure I buy that.  A GPG-signed email, something that's been 
around for more than decade, transits the system with unsigned email 
headers.  GPG content is commonly delivered buried inside a larger 
container.

	Jeff



--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/