On Mon, May 25, 2015 at 06:43:46PM +0200, Wouter Verhelst wrote: > Since signing changes the sha1 of the commit, only if rewriting history isn't a > problem. A solution to this without history rewriting is to tag the commits you want to sign. You could tag any commit at any time, and sign that tag. Impractical if you want to retroactively sign a huge swathe of commits, but not bad if you want to retroactively sign a handful of releases, say.