Leo Famulari <l...@famulari.name> writes: > On Thu, Nov 22, 2018 at 04:07:33AM +0800, Alex Vong wrote: >> I think ECC key works with commit signing precisely because commit >> signing simply requires Savannah to store the key. However, for >> functionalities provided by Savannah (e.g. sending email to your address >> encrypted with your ECC public key), it wouldn't work (as mentioned in >> <https://savannah.gnu.org/support/?109583>). > > To clarify, Savannah doesn't require you to store any key at all in > order to sign Git commits. I think that Savannah accounts don't > integrate with Git at all; they simply offer hosted Git repositories, > and commit signing is a feature of Git. > > We require Guix contributors to upload their keys to their Savannah > account so that there is an authoritative source of signing keys.
I see, so it's a guix policy rather than a technical requirement. Indeed, we can download the key from <https://savannah.gnu.org/users/********>
signature.asc
Description: PGP signature
