Hi Ian
On Wed, Jul 31, 2019 at 05:08:51PM +0100, Ian Jackson wrote:
> Bastian Blank writes ("Re: tag2upload (git-debpush) service architecture -
> draft"):
> > The hypothetical tool creates a complete .dsc file with the names and
> > checksums of the uncompressed files. The user signed .dsc is put into
> > the tag.
> The point of the tag2upload exercise is to move the .dsc generation
> from the uploader's computer to a central service, because .dsc
> generation is complicated, slow, and inconvenient. So generating the
> .dsc on the user's system defeats the object of the exercise.
One last time: The user has to certify his upload in a way the archive
can verify.
Now it is EOD from me.
Regards,
Bastian
--
All your people must learn before you can reach for the stars.
-- Kirk, "The Gamesters of Triskelion", stardate 3259.2
