Re: [task #4633] GPG-Signed Commits

[Derek Price]

Derek Price wrote:

>sessions 1, 2, & 3 exiting.  Should be simple enough.  Not sure what
>would happen with a really heavily loaded system.  Sylvain, can you give
>us any statistics on Savannah?  Average number of concurrent users,
>frequency of commits, frequency all users exit, etc.?
>

Or the counter could just be stored in an unbounded char * buffer, with
homegrown functions to handle the addition, and the counter would never
need to be decremented.  That wouldn't be so hard, really.  Would be
hard to DoS too - the number of operations required to increase the
storage required by the counter would be related exponentially to its
current size.

I'm still not sure I'd want to reuse this value as the commitid, since
NOW + 8 RANDOM BYTES would still be less likely not to collide when
merged into another repository.

Hrm.  Perhaps the best solution would still be just to use the
commitid?  If we ever find a system where both time() and /dev/urandom
are broken, then we can worry about using a counter as described above
as a fallback?

Regards,

Derek

-- 
Derek R. Price
CVS Solutions Architect
Ximbiot <http://ximbiot.com>
v: +1 717.579.6168
f: +1 717.234.3125
<mailto:derek@ximbiot.com>