分布式版本控制系统中无可争议的代码时间戳 [英] Indisputable time-stamping for code in distributed versioning systems

问题描述

似乎最流行的版本控制系统(如Git和其他系统)允许修改存储库历史记录-反过来，这意味着可以很容易地伪造提交/修订的日期.如果有人想回顾一下托管在GitHub上的项目的开发过程，则不会保证所有信息都是真实的.

It seems that the most popular versioning systems like Git and others allow for repository history modification - which in turn means that the date of commit/revision can be very easily forged. If one would ever want to retrospectively check the development process of a project hosted on GitHub, none of the information will be guaranteed to be true.

日期的准确性(以及作者的身份)对于第三方的版权保护和追溯性验证至关重要，因此我一直在想:什么是通常的做法，以使您的代码的在线可用性正确地打上时间戳记?为了进行类比，Youtube不允许用户更改上传视频的日期，因此很容易看到哪个视频是原始，因为可能的伪造直接来自Youtube的开发团队，这是极不可能的并且是阴谋的.

Accuracy of dates (and authorship as well) can be crucial for copyrighting and retrospective validation from a third-party, so I've been wondering: What is the common practice for keeping your code's availability online properly time-stamped? To add an analogy, Youtube doesn't allow users to change the date of videos uploaded, so it's clear to see which video was the original, as potential forgery would have to come from Youtube's dev team directly, which is highly unlikely and conspiratorial.

在分布式版本系统中是否有任何变通办法来实现这一目标?如果不是，是否存在任何在线代码存储区，其中的提交日期不可更改，或者存储了内容的上传日期并可供显示?

Are there any workarounds in distributed version systems to achieve this? If not, are there any online code storages where the commit date is not modifiable or where the upload date of the contents is stored and available for display?

感谢您的时间，

VA

推荐答案

这与历史记录重写无关，任何人都可以在他们管理的任何系统上轻松伪造时间戳记.如果您确实需要不可伪造的时间戳，则应将数字时间戳服务的输出放入您的提交消息中，这很容易进行设置，将 git write-tree 的输出提供给时间戳API，等待结果，然后将其放入消息中.

This has nothing to do with history rewrites, anyone can trivially forge timestamps on any system they administer. If you really need an unforgeable timestamp you should be putting the output from a digital timestamping service in your commit message, it'd be easy enough to set that up, feed the output of git write-tree to the timestamping api, wait for the result, put that in the message.

这篇关于分布式版本控制系统中无可争议的代码时间戳的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！