----- Original Message -----
<snip>
The git tags are still signed by Linus. Does that cover your
concerns?
Not really, no. I think that multiplying the intermediaries between
kernel.org
and the Fedora repos by adding
gitlab.com in the middle might not be the
best of ideas.
If the Fedora security team is fine with it, I'm fine with it, and even if I
understand the practical concerns (pagure not being up to par to deal with
repos that size, and without a mail gateway support), I find it slightly
concerning.
Cheers