Why not upgrade CVS? Subversion, GNU Arch, etc.

Why not upgrade CVS? Subversion, GNU Arch, etc.

Posted Jun 4, 2004 0:05 UTC (Fri) by abentley (guest, #22064)
In reply to: Why not upgrade CVS? Subversion, GNU Arch, etc. by robla
Parent article: Arch for CVS Users (Linux Journal)

You can't have high confidence in the change auditing mechanisms, since most of the interesting logging/auditing/etc would need to occur in the client.

On the contrary, Arch has support for gpg-signed archives. The signing happens client-side, which means you know which archives you can trust even after a server compromise.

---

(Log in to post comments)