From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-2.4 required=3.0 tests=DKIMWL_WL_HIGH,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI, SPF_HELO_NONE,SPF_PASS,USER_AGENT_SANE_1 autolearn=no autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 703D9CA9EA0 for ; Fri, 18 Oct 2019 18:00:30 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 49881222C2 for ; Fri, 18 Oct 2019 18:00:30 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=kernel.org; s=default; t=1571421630; bh=L3zozLzhMTxvIKQ6d0Wn7/JusBBkzGSGTcWZxCpUwVk=; h=Date:From:To:Cc:Subject:References:In-Reply-To:List-ID:From; b=rH9HUC5LbbtNWlB9WbvhsD4H62Pok/yDveAMZa/OvYOFiVSN/gHB8pcYirSBomtOT iSa0VQfp/HIBPIq1vaSe7nMkC6T9mYCOrnmYHW9v8EvcP9GzimSmxQwDX/cYVtDP2s HacBRKl//rQnPq7VFyDSfViQliMQgQoT758nw4rg= Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S2409359AbfJRSAa (ORCPT ); Fri, 18 Oct 2019 14:00:30 -0400 Received: from mail-qt1-f193.google.com ([209.85.160.193]:39909 "EHLO mail-qt1-f193.google.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S2406202AbfJRSA3 (ORCPT ); Fri, 18 Oct 2019 14:00:29 -0400 Received: by mail-qt1-f193.google.com with SMTP id n7so10328373qtb.6 for ; Fri, 18 Oct 2019 11:00:29 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=linuxfoundation.org; s=google; h=date:from:to:cc:subject:message-id:mail-followup-to:references :mime-version:content-disposition:in-reply-to:user-agent; bh=L3zozLzhMTxvIKQ6d0Wn7/JusBBkzGSGTcWZxCpUwVk=; b=EdfMCu4RwaiqCEbwvJ0pe9pZ6LyrloV5VEgKK/Vy8rewVB0KG9Z6eqrMknhSFqCZ1z S1SVdHi7ZgTviuWDYQwcQU+KlXbpgM48rK+7NUWJFdIvk+8hFir1VYI8erByGR22+Xaf 5CVFc8Q53zWmwxfaMRaQ2eDrVfluP+2RV048M= X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:date:from:to:cc:subject:message-id :mail-followup-to:references:mime-version:content-disposition :in-reply-to:user-agent; bh=L3zozLzhMTxvIKQ6d0Wn7/JusBBkzGSGTcWZxCpUwVk=; b=BJj02QcJGvdDxUJC+VAbwEOLlTrBXRm+PvCjnHqD9AwPL/TebX+9VcGKs5sUgtHxOg VUSna9qHAd4udE8fqILnL/cYaxnCkt6C1rNpymWN36R7Nh0FLNNr9jZLTQ3ZFq2CkxjS 0T64+AtlnMYD1Dz4AO8Vpehpu9CdP1Q6iny+4JmFgt8zkskz81t69xuIDV7gnBy2OhIA ruioSTZCbWRfSjfe2BLtJA5TDf2oO0ON67SwO8JFzzdrcoBFTw7IXgB07TpXEFGKtsD2 BL6sytnbYshOHCNtrrByMbHIAC2OgFe/HA6ShRFuucSP/ng5JK5PPAMdl0xTz4YUR2r9 TNEA== X-Gm-Message-State: APjAAAUF6h+qUJdd/nSExNwYxfjmgKKBU59WcVI3fsxTZBEdbHYJnxwh rpRNtTyHXtanGLc6UOoJUdyOAQ== X-Google-Smtp-Source: APXvYqwSjD5sAuLmxmdsh7lJNhjxTrfSDeUnm3NNAHEFVroKyFbsLT9IljlOGdm4f6qN21YIF1d1qQ== X-Received: by 2002:ac8:38e3:: with SMTP id g32mr11302377qtc.304.1571421628789; Fri, 18 Oct 2019 11:00:28 -0700 (PDT) Received: from chatter.i7.local (192-0-228-88.cpe.teksavvy.com. [192.0.228.88]) by smtp.gmail.com with ESMTPSA id x33sm3556947qtd.79.2019.10.18.11.00.27 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 18 Oct 2019 11:00:27 -0700 (PDT) Date: Fri, 18 Oct 2019 14:00:26 -0400 From: Konstantin Ryabitsev To: Santiago Torres Arias Cc: Vegard Nossum , Willy Tarreau , workflows@vger.kernel.org, Git Mailing List , LKML , Eric Wong Subject: Re: email as a bona fide git transport Message-ID: <20191018180026.GD25456@chatter.i7.local> Mail-Followup-To: Santiago Torres Arias , Vegard Nossum , Willy Tarreau , workflows@vger.kernel.org, Git Mailing List , LKML , Eric Wong References: <20191016111009.GE13154@1wt.eu> <20191016144517.giwip4yuaxtcd64g@LykOS.localdomain> <56664222-6c29-09dc-ef78-7b380b113c4a@oracle.com> <20191018155408.dk4tsjrne42ufpvv@LykOS.localdomain> <20191018160343.GB25456@chatter.i7.local> <20191018161121.6qe5kkweh4u77gvn@LykOS.localdomain> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="W/nzBZO5zC0uMSeA" Content-Disposition: inline In-Reply-To: <20191018161121.6qe5kkweh4u77gvn@LykOS.localdomain> User-Agent: Mutt/1.12.1 (2019-06-15) Sender: workflows-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: workflows@vger.kernel.org --W/nzBZO5zC0uMSeA Content-Type: text/plain; charset=utf-8; format=flowed Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Fri, Oct 18, 2019 at 12:11:22PM -0400, Santiago Torres Arias wrote: >> It's smaller, but it's not a one-liner. Here's a comparison using=20 >> ED25519 >> keys of the same length: >> >> minisign: >> >> RWQ4kF9UdFgeSt3LqnS3WnrLlx2EnuIFW7euw5JnLUHY/79ipftmj7A2ug7FiR2WmnFNoSac= Wr7llBuyInVmRL/VRovj1LFtvA0=3D >> >> pgp: >> >> -----BEGIN PGP SIGNATURE----- >> >> iHUEARYIAB0WIQR2vl2yUnHhSB5njDW2xBzjVmSZbAUCXaniFAAKCRC2xBzjVmSZ >> bHA5AP46sSPFJfL2tbXwswvj0v2DjLAQ9doxl9bfj9iPZu+3qwEAw5qAMbjw9teL >> L7+NbJ0WVniDWTgt+5ruQ2V9vyfYxAc=3D >> =3DB/St > >Yeah, the discrepancy mostly comes from pgp embedding a timestamp and a >longer keyid (+a full keyid fingerprint in pgp 2.1+). Minisign keyids >are 8 random bytes, apparently. > >It doesn't seem like an amazing win in terms of succintness, imvho... There isn't, but ED25519 subkeys are still very rare among developers. =20 Many have 4096-bit RSA subkeys, and you can imagine how large the sigs=20 =66rom those are. I want to underline that my use of minisign was specifically for patches=20 sent via email, without the intent of preserving them in git history=20 (which is why in my proposal they are put under the `---` cutoff). Git=20 itself would continue to use PGP signing. (This also means that we don't necessarily need to make this a native=20 part of git -- it can be accomplished by a combination of wrappers,=20 git-format-patch parameters, and a pre-applypatch hook. However, the=20 likelihood of adoption in this case would be very low.) -K --W/nzBZO5zC0uMSeA Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQR2vl2yUnHhSB5njDW2xBzjVmSZbAUCXan9twAKCRC2xBzjVmSZ bHKSAQCBn6MNi5Y8+QZHCPiGG36Omh8KTlRDxzx2Kbvf/KvM2QEAtcIHs267maE9 dgxYwuJWb17NdZtD7fvmhGvITT7MIQs= =h6t6 -----END PGP SIGNATURE----- --W/nzBZO5zC0uMSeA--