@JensHannemann@mastodon.online
Post #1579420
2026-04-22 17:38 UTC
@phildini I use gitolite with SSH public keys only. In this scenario, a commit with a specific user ID is essentially proof of identity, so signing is kind of useless. Signing off on a commit indicating approval is a bit more useful. So in my opinion signing commit only makes sense in scenarios where access credentials not necessarily provide identity (e.g. username/password).
Replies (0)
No replies.