On Fri, 2015-10-16 at 19:45 +0000, Jonathan Wilkes wrote:
Hi Roman, If you do that over http then you don't have any way of knowing whether the
data that you requested is the data that you get back.
Ah, I see. In my short-sighted notion of security I was only thinking about not revealing my credentials.
What IOhannes did - signing tags - tackles this very issue the single best way, if I understand the issue correctly.
Roman