launchpad-dev team mailing list archive

[Karl Fogel <karl.fogel@xxxxxxxxxxxxx>]

Jeroen Vermeulen <jtv@xxxxxxxxxxxxx> writes:
>I don't think I follow the argument here.  What kind of trust are you
>talking about?  If it's trust in honesty on our part, viewers already
>have to trust that we deploy the same code we publish, with no hidden
>tricks.  If it's trust in timely synchronization, we have logs.
>
>If it's trust in us making faithful copies, well, if there's a
>password on the master then the owner clearly wants it restricted.  So
>the question of trust lies on that side, not on ours.

Oh, I didn't mean trust in the sense of worrying about malicious intent.
I more meant trust in the sense of "one can independently verify that
Launchpad's mirror of the code is complete and up-to-date with respect
to the upstream repository" -- i.e., that no technical glitches have
occurred.

-Karl