On Thu, Nov 22, 2018 at 04:07:33AM +0800, Alex Vong wrote: > I think ECC key works with commit signing precisely because commit > signing simply requires Savannah to store the key. However, for > functionalities provided by Savannah (e.g. sending email to your address > encrypted with your ECC public key), it wouldn't work (as mentioned in > <https://savannah.gnu.org/support/?109583>).
To clarify, Savannah doesn't require you to store any key at all in order to sign Git commits. I think that Savannah accounts don't integrate with Git at all; they simply offer hosted Git repositories, and commit signing is a feature of Git. We require Guix contributors to upload their keys to their Savannah account so that there is an authoritative source of signing keys.
signature.asc
Description: PGP signature
