Re: [RFC] General Resolution to deploy tag2upload

[Ian Jackson <ijackson@chiark.greenend.org.uk>]

Aigars Mahinovs writes ("Re: [RFC] General Resolution to deploy tag2upload"):
> Correct me if I am wrong, but if we are looking at dgit.d.o as
> snapshot and audit log of the tag2upload service, would it not be
> beneficial for the auditing and back-tracing process to actually
> keep the code that someone tried to upload via tag2upload even if
> their key is revoked, expired or signature is invalid?

This is an interesting idea.  There are some potential trouble
vectors, there, though (eg, malicious people could cause the sytem to
store Bad Stuff).  And also it's not entirely straightforward to
implement because the system would need suitable access to whatever
the bad-uploads archive server is.

With the current design, it might be possible to retrieve the tag from
Salsa, perhaps with admin assistance, at least for a while.  That's
not great, but I'm hoping the need for this will be quite rare.

I think I would like to treat your suggestion as a possibility for
future enhancement, rather than something we'd have from day one.

Ian.

-- 
Ian Jackson <ijackson@chiark.greenend.org.uk>   These opinions are my own.  

Pronouns: they/he.  If I emailed you from @fyvzl.net or @evade.org.uk,
that is a private address which bypasses my fierce spamfilter.