GnuPG Github mirrors

[shawn wilson]

On Mon, Oct 26, 2015 at 3:58 PM, Jeroen Ooms <jeroen.ooms at stat.ucla.edu> wrote:
> On Mon, Oct 26, 2015 at 8:05 PM, Kristian Fiskerstrand
> <kristian.fiskerstrand at sumptuouscapital.com> wrote:
>> why would anyone want to move away from libre repository hosting (and issue tracker, wiki etc) in favor of a proprietary solution where you potentially have no control of your own data in the future?
>
> It's a *mirror*, I'm not sure where exactly you got the moving away
> part. Think of it as a similar role as ftp mirrors, but then for
> browsable code, commits, etc. Using it is entirely optional, you don't
> have to give out control of your data to anyone.
>

I think the majority don't really care if a service hosting us has
closed code of their own. However, this might pose an issue if github
is ever owned and someone subverts gpg code - might i suggest signing
*something*:
 % git lg | head -3

gits/gnupg (master) swlap1
* a6c2c09 - (HEAD, origin/master, origin/HEAD, master) gpg: Do not
call an extra get_validity if no-show-uid-validity is used. (58
minutes ago) <Werner Koch>  [N]
* 91015d0 - gpg: Ensure all weak digest rejection notices are shown (5
hours ago) <Daniel Kahn Gillmor>  [N]
* 0d37a40 - w32: Make it build again if Tofu support is not available.
(5 hours ago) <Werner Koch>  [N]

 % git log --tags --simplify-by-decoration --pretty="format:%ai %d
[%G?]" | head -3
gits/gnupg (master) swlap1
2015-10-09 17:13:35 +0200  (tag: gnupg-2.1.9, origin/STABLE-BRANCH-2-2) [N]
2015-09-10 16:40:37 +0200  (tag: gnupg-2.1.8) [N]
2015-08-11 13:54:29 +0200  (tag: gnupg-2.1.7) [N]

Ofcourse, no one linux kernel stuff and nothing *real bad* has
happened to it yet, so FWIW.