| |||||||||||||
|
| |||||||||||||
Why not upgrade CVS? Subversion, GNU Arch, etc.Why not upgrade CVS? Subversion, GNU Arch, etc.Posted Jun 4, 2004 0:05 UTC (Fri) by abentley (guest, #22064)In reply to: Why not upgrade CVS? Subversion, GNU Arch, etc. by robla Parent article: Arch for CVS Users (Linux Journal)
You can't have high confidence in the change auditing mechanisms, since most of the interesting logging/auditing/etc would need to occur in the client. On the contrary, Arch has support for gpg-signed archives. The signing happens client-side, which means you know which archives you can trust even after a server compromise.
(Log in to post comments)
|
|
||||||||||||