Include `rad/id` in signed refs
We ensure that a rad/id ref is included in the signed refs file under
rad/sigrefs. This prevents a certain kind of “grafting” attack where
signed refs can be copied between repositories.
When verifying signed refs, we ensure that the ref is present and points to an identity branch that matches the repository identity containing the signed refs.
We ensure that a rad/id ref is included in the signed refs file under
rad/sigrefs. This prevents a certain kind of “grafting” attack where
signed refs can be copied between repositories.
When verifying signed refs, we ensure that the ref is present and points to an identity branch that matches the repository identity containing the signed refs.
Make change backwards compatible.
Add tests.
Rebase.