Re: [Enigmail] jsunit updates and distribution

Patrick Brunschwig <[email protected]> Wed, 18 Sep 2019 07:39:51 +0200
Newsgroups	gmane.comp.mozilla.enigmail.general
Message-ID	<[email protected]>
Am 17. September 2019 18:55:53 MESZ schrieb john doe <[email protected]>:
>On 9/17/2019 5:22 PM, Patrick Brunschwig wrote:
>> john doe wrote on 17.09.2019 16:37:
>>> On 9/17/2019 3:58 PM, Daniel Kahn Gillmor wrote:
>>>> Hi Patrick, and other enigmail folks--
>>>>
>>>> I'm trying to sort out enigmail 2.1 for debian with tbird 68.
>>>>
>>>> i note that to properly test the new enigmail, i need a newer
>version of
>>>> jsunit for the testing, so i'd like to ship that in debian too.  at
>>>> https://www.enigmail.net/jsunit/ i see that jsunit 0.2.2 is
>available.
>>>>
>>>> i notice a few things that seem amiss with jsunit distribution. 
>I've
>>>> ordered them from highest priority to lowest priority as i see it
>-- but
>>>> if you can fix any of them, that would be great:
>>>>
>>>>  * The git repo at
>https://git.code.sf.net/u/pbrunschwig/jsunit/source
>>>>    has no tags for anything after jsunit-0.2.0, even though
>>>>    https://www.enigmail.net/jsunit/ lists 0.2.1 and 0.2.2.
>>>>
>>>>  * The git tags that i do see don't appear to be signed.  Please
>sign
>>>>    any new tags you create!
>>>>
>>>
>>> And also, signing of commit.
>>
>> No, I won't sign commits. I'm fine signing tags (like I did for years
>on
>> Enigmail), but I will not sign commits.
>>
>
>Do you mind explaining why you are against signing commits?
>
>--
>John Doe
>
>_______________________________________________
>enigmail-users mailing list
>[email protected]
>To unsubscribe or make changes to your subscription click here:
>https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net

In my eyes, a signature carries a certain value. By signing, I warrant a certain quality about the signed content. That's why I sign release tags, and some of my emails.

But when it comes to commits, I don't warrant for anything. Some commits are good, some break things, some are bad attempts to fix something, etc. Also, since I'm mostly the only developer, there's no review on commits. In other words, unlike releases, there is no quality assurance on commits.

Therefore, you'll never be able to convince me to sign commits.

Patrick

_______________________________________________
enigmail-users mailing list
[email protected]
To unsubscribe or make changes to your subscription click here:
https://admin.hostpoint.ch/mailman/listinfo/enigmail-users_enigmail.net
signature.asc (application/pgp-signature, 862 B)