On Sunday 24 May 2015 13:02:38 Thomas Koch wrote:
> Git supports signing of commits since version 1.7.9. Everybody should sign
> git commits always.

There is however the argument that by signing every commit by default one may 
accidentally publish a signature on some unverified code and somebody else may 
trust this code because of this.

http://programmers.stackexchange.com/questions/212192/what-are-the-advantages-and-disadvantages-of-cryptographically-signing-commits-a


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/3844024.BrcdrFXiHE@x121e

Reply via email to