From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from ffbox0-bg.mplayerhq.hu (ffbox0-bg.ffmpeg.org [79.124.17.100]) by master.gitmailbox.com (Postfix) with ESMTP id 33B5043D25 for ; Mon, 8 Aug 2022 15:03:03 +0000 (UTC) Received: from [127.0.1.1] (localhost [127.0.0.1]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTP id BD8C968B735; Mon, 8 Aug 2022 18:02:59 +0300 (EEST) Received: from mail-vs1-f41.google.com (mail-vs1-f41.google.com [209.85.217.41]) by ffbox0-bg.mplayerhq.hu (Postfix) with ESMTPS id 2FF5168B501 for ; Mon, 8 Aug 2022 18:02:53 +0300 (EEST) Received: by mail-vs1-f41.google.com with SMTP id m67so9064690vsc.12 for ; Mon, 08 Aug 2022 08:02:53 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :from:to:cc; bh=tjx/ew9cxZ80WmOgwSqq6j+4oIR+Fye1j1kSlgNaOaE=; b=VwyccPYBfsR9Cvr1Oxh9HrBr9FamD+F1dOYgwUHAPCDrfMNKMgBQYay5ac12R7CYhy gIS590YinnXuXDHN2TbYhH05jPcgQwGA3t8BWnPMYVRj0Eu4YM9GPFxfqBpS6TNEvbid ZC0Z3I8OO/wNKoFRUZwB7HKKVsLZK/o7jzXCJQ/8lmw1m+/C7B2yBy1tVs+alzfYySZD bX21+CG4rtYZut+OTKzPx3d1VPHbtZ6VM+s09uJlruFoX36kweoBnwM4VtNsBWiRXFWQ UvyQfPr/CUCLTYkbaK7HekHP+ihJIfCYlr4uy+2ovf0lO2e6NRViu7uyd0/PgugmhpL4 /gRg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20210112; h=content-transfer-encoding:in-reply-to:from:references:to :content-language:subject:user-agent:mime-version:date:message-id :x-gm-message-state:from:to:cc; bh=tjx/ew9cxZ80WmOgwSqq6j+4oIR+Fye1j1kSlgNaOaE=; b=B6k8GUEhJanxnDdi/98wu2R5/jCFV+LFQHuZOfISQwou/R73iCtxXFR1QDIFA5dMvy cUO+eIo2eQ9fatqPuP9afao/d4I6uyH2ruvy5FcloYtbR2+ww3wCj7x1tjrx8UWXxqNO hmbBaHgtjNjVPXNlyeH1t/Sl01EWnCiFslwj4GelaTmhdbtfGZ+8glSGdZLsQFvlH4ax zqYYsA+ntRkChtN/rG43L/WzHecCkO9x6hftHsWRAVmJqiE69dvOqrpHSYd4MYfR9x0C +ggqmmp1S74Kw0LIoQgYCAOWmFhh2lQipMhnMTiIJqKQe3mUK4SkkI9rj0t0q+vIHM9Y ox+A== X-Gm-Message-State: ACgBeo2hKPzgN43fPk2qVrgKwuC3nNTow+qEjg1ykRNycyEJItudmnzZ qwY0kWTIU7tXNA0WvL+XChD9y2Nj6G8= X-Google-Smtp-Source: AA6agR78kgzd9eDdUadhd+cS5asIG04CVg5sXmvXc3Ao9Cmk8cMT6JCkrSFtR+/wl871jl2I9AGiRQ== X-Received: by 2002:a67:b24b:0:b0:357:31a6:1767 with SMTP id s11-20020a67b24b000000b0035731a61767mr7407468vsh.29.1659970960336; Mon, 08 Aug 2022 08:02:40 -0700 (PDT) Received: from [192.168.0.11] ([186.136.131.204]) by smtp.gmail.com with ESMTPSA id 1-20020a670801000000b0035fbcd4c849sm7900515vsi.18.2022.08.08.08.02.39 for (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Mon, 08 Aug 2022 08:02:39 -0700 (PDT) Message-ID: <3f907b93-1021-d0d2-7322-c65624a47988@gmail.com> Date: Mon, 8 Aug 2022 12:02:39 -0300 MIME-Version: 1.0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:91.0) Gecko/20100101 Thunderbird/91.12.0 Content-Language: en-US To: ffmpeg-devel@ffmpeg.org References: <20220808145008.26162-1-michael@niedermayer.cc> From: James Almer In-Reply-To: <20220808145008.26162-1-michael@niedermayer.cc> Subject: Re: [FFmpeg-devel] [RFC] git and signing commits and tags X-BeenThere: ffmpeg-devel@ffmpeg.org X-Mailman-Version: 2.1.29 Precedence: list List-Id: FFmpeg development discussions and patches List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Reply-To: FFmpeg development discussions and patches Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii"; Format="flowed" Errors-To: ffmpeg-devel-bounces@ffmpeg.org Sender: "ffmpeg-devel" Archived-At: List-Archive: List-Post: On 8/8/2022 11:50 AM, Michael Niedermayer wrote: > Given the recent server issues, i wonder if we should suggest/recommand > and document signing commits and tags fwiw, the git repo isn't hosted in the server that had issues. > > i tried to push such commit to github and it nicely says "verified" > https://github.com/michaelni/FFmpeg/commit/75f196acd16fb0c0ca7a94f0c66072e7c6f736bf > > Ive generated a new gpg key for this experiment as i dont have my > main key on the box used for git development and also using more > modern eliptic curve stuff (smaller keys & sigs) > i will upload this key to the keyservers in case it becomes the > one i use for git. I agree 100% we should sign release tags, and not only the tarballs. Telling people to sign random commits isn't as useful, but if people want to do it then that's fine too. > > -----BEGIN PGP PUBLIC KEY BLOCK----- > > mDMEYvA3sxYJKwYBBAHaRw8BAQdAhF26S5QlUZssryHGHLYw61FsF+0s54qWEDm1 > Rurfi5O0ME1pY2hhZWwgTmllZGVybWF5ZXIgPG1pY2hhZWwtZ2l0QG5pZWRlcm1h > eWVyLmNjPoiWBBMWCAA+FiEE3R7J6N4IXGKbPhhGsY6JKLOUjWQFAmLwN7MCGwMF > CQPCZwAFCwkIBwIGFQoJCAsCBBYCAwECHgECF4AACgkQsY6JKLOUjWTKMwD8DW39 > MrtvYdjP/CvxWTma+MErgkFfrx67y+zO0r6vYmYA/063Y7s6+ef0Whydf5xlJLYF > nX3ZwXnZubVsjJz0WV0EuDgEYvA3sxIKKwYBBAGXVQEFAQEHQD381bpdRfPa3DjW > WFQx1IeRgeSavPep1v4C2noShjcTAwEIB4h4BBgWCAAgFiEE3R7J6N4IXGKbPhhG > sY6JKLOUjWQFAmLwN7MCGwwACgkQsY6JKLOUjWRryQEA+nEGWw5ygbiYpSe34erz > opoxh+iIUdzl+OnyU2fpNVsA/A91nhyyR8eMlAptr16FVoEnZBHtcK2cTcGxqkdL > JMkG > =D6v5 > -----END PGP PUBLIC KEY BLOCK----- > > > > _______________________________________________ > ffmpeg-devel mailing list > ffmpeg-devel@ffmpeg.org > https://ffmpeg.org/mailman/listinfo/ffmpeg-devel > > To unsubscribe, visit link above, or email > ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe". _______________________________________________ ffmpeg-devel mailing list ffmpeg-devel@ffmpeg.org https://ffmpeg.org/mailman/listinfo/ffmpeg-devel To unsubscribe, visit link above, or email ffmpeg-devel-request@ffmpeg.org with subject "unsubscribe".