On Thu, 5 May 2016, John Crispin wrote:

On 04/05/2016 23:38, Kus wrote:
Greetings

I'd like to propose that all commits (at least to master) going forward be 
signed with the commiter's gpg key.

https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work

Thoughts?

we could do that. if you look at the keyring.git, you will see that we
already asked those with commit access to submit their gpg keys.

At that point, all you are signing is who merged the work into the tree. That doesn't give you any information about who created the work.

Is there enough value in this to be worth the hassle?

David Lang

_______________________________________________
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev

Reply via email to