On 20/02/2013 13:02, Rich Freeman wrote: > I'm actually wondering if that makes sense with git when a specific > commit is referenced, since everything is content-hashed anyway. > Perhaps we just need to confirm that git actually checks the hash.
No. The policy is not _just_ because of the manifest verification. The policy is also because any ebuild relying on a network service to work cannot be assured to work at any point in time: not only it depends on the network connection of the user, but it also depends on the service to be available. So don't even _think_ about trying to ask for an exception for Git, because you'll have to have it over my ssh key. -- Diego Elio Pettenò — Flameeyes flamee...@flameeyes.eu — http://blog.flameeyes.eu/
