Re: [Gnu-arch-users] tla--devo--1.2 has preliminary gpg stuff

[Tom Lord]

    > From: Miles Bader <address@hidden>

    > How about simply having two signatures, a commit signature and a
    > mirroring signature, either of which could be missing...?

Interesting idea.

The other idea is just to fully generalized so that people can pile-on
signatures and add attributes to those signatures -- just so we can
point out that monotone is not that exciting.

But really I'm pretty skeptical about the robustness and meaning of
these webs of trust -- I think I'll just stick to a single signature
for now to meet the immediate needs of project hosts.

-t