News for hackers. Stuff that matters.

A comment on The beginning of Git supporting other hash algorithms. Parent comment

Re:The beginning of Git supporting other hash algorithms by scrollaway on Sunday March 19, 2017 @09:41PM (#13911074)
I was only talking about git commits though. For tags we agree, as the tag is only a pointer (https://twitter.com/Adys/status/835595116110823425).

But for the commit it's different, because the $text in your example affects the hash of the commit itself. And my understanding is that if you sign the commit, you're signing both the contents and the hash of the content. Am I incorrect?

[ Parent | on HN ]
Re:The beginning of Git supporting other hash algorithms by glandium on Sunday March 19, 2017 @09:45PM (#13911087)
If you sign the commit, you sign the exact text I quoted, where $text is what you pass to the `-m` argument to `git tag`.
[ Parent | on HN ]