Conversation

Notices

1. Embed this notice
   Ludovic Courtès (civodul@toot.aquilenet.fr)'s status on Saturday, 27-Jan-2024 20:36:15 JST Ludovic Courtès

   • Glyph
   • Kartik Agaram

   @glyph 💯 on the vacuity of signed commits if all it gives is “Verified” ✔ badges with useless semantics.

   I wrote about it and about a solution to actually make use of those commit signatures to authenticate #Git checkouts:
   https://doi.org/10.22152/programming-journal.org/2023/7/1

   @akkartik @khinsen

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Saturday, 27-Jan-2024 20:36:13 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Glyph
     • Kartik Agaram

     @civodul @glyph @akkartik @khinsen Just ditch GitHub/Gitlab really.

     Git proper with the gpg.ssh.allowedSignersFile configuration allows to use a file (relative to repository-root) for the list of authenticated keys, and it entirely allows offline use because said file contains the public keys.

   • Embed this notice
     Haelwenn /элвэн/ :triskell: (lanodan@queer.hacktivis.me)'s status on Saturday, 27-Jan-2024 22:55:49 JST Haelwenn /элвэн/ :triskell:

     in reply to

     • Glyph
     • Kartik Agaram
     @civodul @khinsen @akkartik @glyph It doesn't forces out-of-band or in-band.
     
     In fact here I made it in-band: https://hacktivis.me/git/utils-std/file/authorized_keys.git.html
     
     Sure it doesn't have the signature-tree of Guix authorization file but I would say you don't need such a format if you check for signatures before applying a commit (could be done via git-hooks), which also means access can be trivially revoked or limited (valid-after/valid-before).
   • Embed this notice
     Ludovic Courtès (civodul@toot.aquilenet.fr)'s status on Saturday, 27-Jan-2024 22:55:50 JST Ludovic Courtès

     in reply to

     • Haelwenn /элвэн/ :triskell:
     • Glyph
     • Kartik Agaram

     @lanodan A static and out-of-band ‘allowedSignersFile’ is an improvement but it’s insufficient: the set of allowed signers evolves over time and this must be accounted for.

     That’s what the method described in this paper is about.

     @khinsen @akkartik @glyph