[Monotone-devel] Re: Monotone server

[Bruce Stephens]

Daniel Carrera <address@hidden> writes:

> Bruce Stephens wrote:

[...]

>> "mtn commit" always adds four certs (author, date, branch, changelog).
>> The revision itself is not signed, but those four things are (and they
>> reference the revision).
>
> Ok. But the signature also covers the SHA1 sum of the revision, right?
> If the SHA1 sum is signed that's equivalent to signing the revision.

Yes.  (Equivalent to signing the revision n times, I guess, once for
each cert.)