Comments on the change: Mitigate a flush+reload cache attack on RSA secret exponents

[NIIBE Yutaka]

On 2013-08-08 at 17:05 +0900, NIIBE Yutaka wrote:
> Users could do that, but I don't know if gitweb can be configure
> that.

I realized that gitweb doesn't have support to show notes, while cgit
seems to have.

Given the situation, my opinion is that, it's not good idea, for now,
to share some useful information with git notes (for libgcrypt, gnupg,
etc.).

			*	*	*

If we still want to share with git notes, we need some configuration
at playfair.gnupg.org [0], and ask everyone to follow git notes [1].

[0] About configuration at playfair.gnupg.org

Currently, we have some issue to stop sharing refs/notes/*.  Here's
error log:
--------------------
remote: *** Update hook: unknown type of update to ref refs/notes/commits of type commit        
remote: error: hook declined to update refs/notes/commits        
To ssh://playfair.gnupg.org/git/libgcrypt.git
 ! [remote rejected] refs/notes/commits -> refs/notes/commits (hook declined)
error: failed to push some refs to 'ssh://playfair.gnupg.org/git/libgcrypt.git'
--------------------

[1] Configuration for each person.

I will have something like this to follow remote git notes:
---------------
[remote "origin"]
	fetch = +refs/heads/*:refs/remotes/origin/*
	fetch = +refs/notes/*:refs/notes/*                  <---- this
	url = ssh://playfair.gnupg.org/git/libgcrypt.git
---------------
--