FYI: a secure Monticello?

Hans-Martin Mosner hmm at heeg.de
Sat Nov 15 10:46:02 UTC 2003


Avi Bryant wrote:
> 
> On Nov 6, 2003, at 4:20 AM, Phil Hargett wrote:
> 
> > In the interest of sharing ideas about source code control and
> > versioning systems, have y'all seen this recent update on freshmeat
> > for a package called Monotone?
> >
> > It bills itself as a secure, distributed version control system.  It
> > resembles Monticello in that any repository can sync with any other
> > repository, and each package in a repository knows it's version
> > history with other repositories.  It adds further functionality like
> > delta merging within files and source trees, secure hashing (with
> > SHA1) of source trees and file contents to ensure package integrity,
> > and the use of certificates with RSA encryption to authenticate
> > authors of changes.

You might probably notice that I did such a thing for Squeak quite some
time ago - it had arbitrary repository syncing, digital signatures, a
HTTP front end for manual access etc...

Sadly, it did not lift off at the time - my implementation choices
regarding data storage and interchange protocol were probably not the
best, and marketing is not my strength :-)

Anyway, the ideas are still there, and Squeak has all the required
building blocks to do it - I would love to do it, but don't have the
time for it right now...

Cheers,
Hans-Martin



More information about the Squeak-dev mailing list