bzr.dev missing signatures

[Robert Collins]

On Sat, 2006-05-06 at 23:14 -0500, John Arbash Meinel wrote:
> In testing my 'bzr verify-sigs' plugin, I found that bzr.dev doesn't
> have as many signatures as it should. I'm also don't believe that it has
> all of Robert's signatures.
> 
> Could we run "bzr pull-sigs" from my plugin:
> http://bzr.arbash-meinel.com/plugins/signing/
> 
> The basic problem is that merging from a branch doesn't pull in
> signatures for revisions that it already has. So 'pull-sigs' just forces
> it to check for any new signatures.

With knits this should be cheap : patches to fetch to grab signatures
for all revisions held locally might be a good idea... though there are
security ramifications too I guess.

Rob
-- 
GPG key available at: <http://www.robertcollins.net/keys.txt>.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/bazaar/attachments/20060508/2bc240f9/attachment.pgp