Re: please use signed git commits (and tags)

["Iain R. Learmonth" <irl@fsfe.org>]

Hi,

On Sun, May 24, 2015 at 01:02:38PM +0200, Thomas Koch wrote:
> Git supports signing of commits since version 1.7.9. Everybody should sign git 
> commits always.

What is the overhead on this?

I sign tags when I remember (which isn't often I'll admit) but signing every
commit is maybe a bit much?

My local git copy that I do development on is trusted, and by signing a tag
you can verify every commit up to that tag.

Thanks,
Iain.

-- 
e: irl@fsfe.org            w: iain.learmonth.me
x: irl@jabber.fsfe.org     t: EPVPN 2105
c: 2M0STB                  g: IO87we
p: 1F72 607C 5FF2 CCD5 3F01 600D 56FF 9EA4 E984 6C49

Attachment: pgprF4ZZlux6W.pgp
Description: PGP signature