On Wed, 2003-12-10 at 11:58, mark benedetto king wrote:
> On Wed, Dec 10, 2003 at 12:40:45PM -0500, Philippe Lavoie wrote:
> >
> > Has Subversion taken steps to add some kind of digital signature to
> > commits? Is this necessary at all?
> >
>
> svn doesn't have builtin signature support/verification. A wrapper
> that used revision-properties to sign the props and fulltexts would be
> pretty straightforward to implement. Of course, that wouldn't solve
> all the key management/distribution hassle.
>
> Things get more complicated if you want to sign just the changes (clients
> would either need to get things in changeset form, so that each signature
> could be verified, or a much more elaborate cryptosystem would need to be
> put together).
Take a look at 'opencm'. It's an SCM system whose primary design is
centered around cryptographic signatures.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Wed Dec 10 19:03:05 2003