Hi, I think this bug report could be closed.
The command `gbp tag` does tag and sign tags if gbp.conf has line `sign-tags = True`. There is also git-debpush that creates the same DEP-14 conformant tags and signs them (but with additional metadata used by tag2upload). It would be unnecessary for `gbp-dch` to create tags. And even if it was to create tags, it should only do them when invoked with both `--commit` and `--release` as a sign that the debian/changelog is not just merely being updated, but that it is the final update for the intent of an upload.
