This is the mail archive of the
mailing list for the GCC project.
Re: Notes from the version control BOF at the summit
Ian Lance Taylor <firstname.lastname@example.org> writes:
> [...] Integrity checks and patch signing would be nice bonuses, but
> they are not required. gcc operates under social conventions, and
> generally relies on trust within the community [...]
Sure, but consider the value of digital signatures in detection of
repository corruption, and toward automated merging of patches without
the necessity of handing out UNIX ssh logins to everyone.