[darcs-devel] darcs push --sign doesn't make sense

[Olivier Thauvin]

If I run:

[nanardon at draco mmm]$ darcs push --sign 
nanardon at virgo:/home/darcs/mmm/unstable
darcs: Signing doesn't make sense for local repositories or when pushing over 
ssh.

I am surprised by this message. push have --sign option, but I don't see any 
other way to push patch except using ssh or on a local repos.

In fact I don't why it is useless to sign patch. The signature allow to 
certify the patch has been really made by me. So can be use by anyone wanting 
to check repos is not corrupted, can be usefull for some critical project 
like ssh, gnupg or other security tools.

IIRC, when darcs apply the patch on the destination repos, it is disassemble 
and rewrite, and so the rewritten patch cannot be resign of course. This 
maybe explain why it is useless. Am I wrong ?

Would be nice if signed patches can be stored in repos in futur version.

Regards.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.osuosl.org/pipermail/darcs-devel/attachments/20061028/7daf539b/attachment.pgp