[Kde-scm-interest] svn, git, bzr

[Thiago Macieira]

Robert Wohlrab wrote:
>On Saturday 26 July 2008 14:55:50 Friedrich W. H. Kossebau wrote:
>> > You can digitally sign commits with Git and most DVCS, that can be
>> > useful.
>
>Can you please tell me how I do it with git? The only thing I found by
>searching for "sign commit git" was the "git commit -s" thing which only
> adds the "Signed-of-by: Blablub" thing. The other one is "git-tag
> -s"... but that would be to complicated for every commit... A commit
> based solution would be nice, but will not protect anything if you want
> to make it rebase-able (ok, maybe the commit text, time and authorship,
> but not the tree associated with the commit).

If you want to sign a commit, you have to first have the commit. So it's 
impossible to put the signature in the commit you're about to make.

That's why the "signing a commit" in Git means tagging it.

-- 
  Thiago Macieira  -  thiago (AT) macieira.info - thiago (AT) kde.org
    PGP/GPG: 0x6EF45358; fingerprint:
    E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://mail.kde.org/pipermail/kde-scm-interest/attachments/20080727/5f3a48f1/attachment.pgp