On Thu, Dec 17, 2015 at 08:06:36PM -0500, Santiago Torres wrote: > > This is what push certificates ought to solve. > > The server records all pushes and its signed certificates of pushes > > and by the difference of the > > refs (either in packed refs or as a loose ref) to the push certificate > > this tampering of > > the server can be detected. > > Is there any specification about push certificates? I would like to read > about them, but I don't seem to find documentation anywhere. Are they a > part of git's specification? Try pack-protocol.txt and protocol-capabilities.txt in the Documentation/technical directory of the git.git repo. E.g.: https://github.com/git/git/blob/bdfc6b364a51b19efbacbd46fcef5be41a5db50e/Documentation/technical/pack-protocol.txt#L489 -Peff -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html