[darcs-users] roadmap / priorities for Darcs (2016 edition!)

[Guillaume Hoffmann]

Hi Alexander,

Darcs currently does not support signing data inside of repositories.

It does only provide *patch bundle* signing in the "darcs send"
command and checking the signature in "darcs apply".

Now, patch signing in Darcs seems dificult to implement because
context changes modify the actual contents of patches. That is, for a
given patch, there are many possible contexts for it. In theory it
would be possible to sign any patch by finding its minimal context and
signing its contents against that context, maybe that would be too
slow to compute for practical uses, or maybe not.

What I think would be easier to do, would be signing tags. Since tags
have no content, the idea would be to sign the pristine tree
associated to some tag, and the signature would be written in the long
description of the tag.

Guillaume



2016-09-08 17:21 GMT-03:00 Alexander Berntsen <alexander at plaimi.net>:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA512
>
> As a lowly wannabe user, I have one request. I want to verify that
> things have been OpenPGP signed, e.g. with 'darcs log'. See 'git log
> - --show-signature' for an example. I just want better OpenPGP-interop
> in general. If satisfactory OpenPGP-interop is been achieved, I will
> have no qualms just using darcs for my everyday work.
>
> Thank you for your consideration.
> - --
> Alexander
> alexander at plaimi.net
> https://secure.plaimi.net/~alexander
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2
>
> iQIcBAEBCgAGBQJX0cgxAAoJENQqWdRUGk8BTsYP/0IRxSCc7GX6yDrhNndTzDic
> BcqywCSy/mn92dWeZE/LNNYRrCHmU5n8lkHo1S1Ic1Az8JUD7BwuNwfNEY+yX+f0
> cqe2VWWgGzNel3WHNLHktsTLx4KMd3Hp0hb+9wIGH72JprvA3/IKE300oX68Mmep
> vOzG7dzplv3RAm+tTWaQMat/SVTfG66b17ZW7IJ4kCGTUYnYkbEIMXkt2b5TShRD
> zCn1y7u7cixAMD2dc8akwHR/Zs22swk3xTUFXuYYJRxUwS036++IRYQvzOhrg7/1
> PpJBvPsiWinL2ca4RyO9jqm5DdhLLYj3bRyrPn4SOze447Td63lYdAECBwhvbigX
> JmP3f+uCrJPDDq3WSqciJYO1uFZy6A9psq7uaN5LdMCRLTBePFXTYUyOypVpdd3/
> xZ1WstSvrFFQTRVJ/6Px6lo77dDYvWE1NQLEAEHUpzykP4KZXXGnSEiq+7mK1P/w
> cONBNy/ijHKxsJQS494JY96XktrP8SO5RiMEEE64ILi/Ug5GLQZsdZLUlLsL9hD8
> iWOHr78ni7q1t3X1+9w2cBUR578SHIAHFOG4jNbAO1BIeP44jJsWvBPFWgLyw25Y
> XTExMzxR29AhCDPRU8ghwxKo7XNOt4O8L1J1B/gt+QkcQeGJl2beLKAgHg0IV61b
> ASpOvXF3P74YdMRXk8ga
> =lq/V
> -----END PGP SIGNATURE-----
> _______________________________________________
> darcs-users mailing list
> darcs-users at darcs.net
> http://lists.osuosl.org/mailman/listinfo/darcs-users