Notes from the version control BOF at the summit

[Frank Ch. Eigler]

Ian Lance Taylor <ian@wasabisystems.com> writes:

> [...]  Integrity checks and patch signing would be nice bonuses, but
> they are not required.  gcc operates under social conventions, and
> generally relies on trust within the community [...]

Sure, but consider the value of digital signatures in detection of
repository corruption, and toward automated merging of patches without
the necessity of handing out UNIX ssh logins to everyone.

- FChE