Johannes Sixt <j6t@xxxxxxxx> writes:
> Since the tag signature depends on the tag message, including all spelin
> errors, the integrator must not change the text so that third parties
> can repeat the verification. (Correct?) I assume this is the reason that
> you put 'tag:' in front of the tag message, to discourage any changes.
Yes, but after reading response from Linus in the other thread, I think we
came up with even a better plan.
> What if the tag is not signed?
Thanks for raising a good point. See
http://thread.gmane.org/gmane.linux.ide/50518/focus=1211568
for the revised plan.
--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html