<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN" "http://www.w3.org/TR/REC-html40/loose.dtd">
<html lang="en" style="--code-editor-font: var(--default-mono-font, "GitLab Mono"), JetBrains Mono, Menlo, DejaVu Sans Mono, Liberation Mono, Consolas, Ubuntu Mono, Courier New, andale mono, lucida console, monospace;">
<head>
<meta content="text/html; charset=UTF-8" http-equiv="Content-Type">
<title>
GitLab
</title>
<style data-premailer="ignore" type="text/css">
a { color: #1068bf; }
</style>
<style>img {
max-width: 100%; height: auto;
}
body {
font-size: .875rem;
}
body {
-webkit-text-shadow: hsla(0,0%,100%,.01) 0 0 1px;
}
body {
font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"; font-size: inherit;
}
</style>
</head>
<body style="font-size: inherit; -webkit-text-shadow: hsla(0,0%,100%,.01) 0 0 1px; font-family: "GitLab Sans",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"Noto Sans",Ubuntu,Cantarell,"Helvetica Neue",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";">
<div class="content">
<p style="color: #777777;">
<a href="https://gitlab.rtems.org/c-mauderer">Christian Mauderer</a>
commented on a
<a href="https://gitlab.rtems.org/rtems/rtos/rtems/-/work_items/5657#note_156668">discussion</a>:
</p>
<div class="md" style="position: relative; z-index: 1; color: #3a383f; word-wrap: break-word;">
<p dir="auto" style="color: #3a383f; margin: 0px 0px 1rem;" align="initial">Seems that I didn't manage to explain my point: There is a difference between author and Signed-off-by:</p>
<p dir="auto" style="color: #3a383f; margin: 0px 0px 1rem;" align="initial">The author is something, that is enforced by git. You can't make a commit without an author. But it doesn't say anything about whether the author accepts any rules of any project.</p>
<p dir="auto" style="color: #3a383f; margin: 0px 0px 1rem;" align="initial">A Signed-off-by line is something that is enforced by a project. So the project more or less says: If you want to contribute, accept these rules. The author of a commit accepted that by actively adding the Signed-off-by line. And that is visible in the git history and not only in some related merge request or some mail written by the author. If someone enables signed off by default in his config, that's his problem. That is like writing blank checks: The project can then write anything in the rules.</p>
<p dir="auto" style="color: #3a383f; margin: 0px 0px 1rem;" align="initial">So the big difference between author and Signed-off-by line is who is asking for the line. Author is tool enforced. Signed-off-by is project enforced.</p>
<p dir="auto" style="color: #3a383f; margin: 0px 0px 1rem;" align="initial">The cryptographic signature that you mentioned multiple times is a further dimension. It makes sure that an author doesn't change between commits. And it allows an author to prove that he is the author of a commit. But it doesn't say anything about whether the author accepted any project rules.</p>
<p dir="auto" style="color: #3a383f; margin: 0px;" align="initial">A cryptographic signature would have advantages for a project from a security point of view. You make it sure that someone is not suddenly replaced by someone else who captured the identity. Or at least you make it harder because the private key is necessary.</p>
</div>
</div>
<div class="footer" style="margin-top: 10px;">
<p style="font-size: small; color: #626168;">
—
<br>
<a href="https://gitlab.rtems.org/rtems/rtos/rtems/-/work_items/5657#note_156668">View it on GitLab</a>.
<br>
You're receiving this email because of your account on <a target="_blank" rel="noopener noreferrer" href="https://gitlab.rtems.org">gitlab.rtems.org</a>. <a href="https://gitlab.rtems.org/-/sent_notifications/5-5o5h52r6fnkfqazmrahd8blo1-1d/unsubscribe" target="_blank" rel="noopener noreferrer">Unsubscribe</a> from this thread · <a href="https://gitlab.rtems.org/-/profile/notifications" target="_blank" rel="noopener noreferrer" class="mng-notif-link">Manage all notifications</a> · <a href="https://gitlab.rtems.org/help" target="_blank" rel="noopener noreferrer" class="help-link">Help</a>
<span style="color: transparent; font-size: 0; display: none; overflow: hidden; opacity: 0; width: 0; height: 0; max-width: 0; max-height: 0;">
Notification message regarding https://gitlab.rtems.org/rtems/rtos/rtems/-/work_items/5657#note_156668 at 1786523669
</span>
<script type="application/ld+json">{"@context":"http://schema.org","@type":"EmailMessage","action":{"@type":"ViewAction","name":"View Work item","url":"https://gitlab.rtems.org/rtems/rtos/rtems/-/work_items/5657#note_156668"}}</script>
</p>
</div>
</body>
</html>