How to check an authenticity of a changeset?

[Maxim Vuets]

On 11/11/08, Benjamin Smedberg <benjamin at smedbergs.us> wrote:

>> So I need some way to check an authenticity of a changeset.
>> Because anyone who has push-access to a repo can
>> impersonates another person.
>
> The way Mozilla does it, is we record who *pushed* a changeset, and make
> that information available publicly on the website as a "pushlog". This
> allows various automated tools and human observers to know who can be blamed
> for a changeset, entirely apart from the user specified in the repository.

Not bad idea, thank you!

-- 
 .  Hoc est simplicissimum!
..: maxim.vuets.name