[bind10-dev] Subversion to Git conversion

JINMEI Tatuya / 神明達哉 jinmei at isc.org
Wed Oct 20 10:08:17 UTC 2010


At Wed, 20 Oct 2010 12:00:27 +0200,
Shane Kerr <shane at isc.org> wrote:

> > Well, I proposed a post-push hook, that would push it from the master
> > repository. First, pull does full copy, push sends only what you tell it to, so
> > you can just have something:
> 
> The current proposal uses a push for this reason.
> 
> Thinking about Jinmei's points, maybe it makes more sense to simply turn
> off the push when we are working on a security issue. That way there
> will be less chance of error and accidentally leaking the problem.

I'm not sure if I understand this...if we completely stop pushing (or
pulling, which doesn't matter in this context) for all branches,
doesn't the fact it stops leak the information of "there's some
security related work behind the scene (so this is a good time to find
security vulnerability in the release versions)"?  In fact, that was
my original question.

---
JINMEI, Tatuya



More information about the bind10-dev mailing list