[darcs-users] OpenPGP signing and Darcs

Alexander Berntsen alexander at plaimi.net
Mon Jun 6 12:57:37 UTC 2016


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hi.

With git I rely heavily on OpenPGP-signing every commit with GPG, so
that users can confidently checkout any snapshot of the repository.

As far as I understand with Darcs, patches can be signed using GPG.
However, I cannot find out how to actually find them. How do I, using
darcs log or similar, actually see the signatures?

As an aside, as a git user and complete Darcs newbie, my understanding
of the ramifications of patches as first-class citizens is admittedly
lacking, so I am not entirely certain how OpenPGP signatures should
work with Darcs. I just want to make sure I can distribute my software
and patches with a certain guarantee for end-users regarding things
like MitM. If anyone has any documentation or guides I should look at
for this, that would be appreciated.
- -- 
Alexander
alexander at plaimi.net
https://secure.plaimi.net/~alexander
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=jjxR
-----END PGP SIGNATURE-----


More information about the darcs-users mailing list