Hello Holger, On Thu 13 Aug 2020 at 10:27PM GMT, Holger Levsen wrote: > hi Sean, > > On Thu, Aug 13, 2020 at 02:22:15PM -0700, Sean Whitton wrote: >> (It's worth noting that unlike salsa tags, the tags on dgit.debian.org >> are immutable. The maintainer pushes a tag to salsa but tag2upload >> copies it to dgit.debian.org, where it becomes a permanent record.) > > how is that achieved technically? surely you thought about someone breaking > into dgit.d.o and modifying stuff...?! :) Rendering the tags even harder to delete is certainly an avenue for future development. At present, someone breaking into dgit.d.o could delete them, but someone who breaks into ftp-master could deleted signed .dscs, so there's no regression. -- Sean Whitton
Attachment:
signature.asc
Description: PGP signature