News for hackers. Stuff that matters.
Re:Welp, there go my Git signatures by eridius on Tuesday October 24, 2017 @02:21PM (#15543893)
Maybe Git could leverage git-notes as a mechanism for allowing re-signing commits without changing the hashes.
Re:Welp, there go my Git signatures by CaliforniaKarl on Tuesday October 24, 2017 @02:34PM (#15544025)
Oh, interesting! There's a new thing about Git that I learned today…

With notes, I think the merge strategy may need to be changed, in case multiple people want to re-sign the same commit, but that shouldn't be too bad. The only thing left is to find a way to leverage the functionality, but having the foundation there should make it much easier!

Re:Welp, there go my Git signatures by hdhzy on Tuesday October 24, 2017 @02:24PM (#15543929)
That exactly how one can put multiple signatures on a commit.
Re:Welp, there go my Git signatures by satbyy on Wednesday October 25, 2017 @06:36AM (#15548944)
Could you plz provide an example ?
Re:Welp, there go my Git signatures by hdhzy on Wednesday October 25, 2017 @07:12AM (#15549105)
Check out Notes Towards Detached Signatures in Git [0].

[0]: https://grimoire.ca/git/detached-sigs

Re:Welp, there go my Git signatures by CaliforniaKarl on Wednesday October 25, 2017 @02:03PM (#15552459)
That's interesting! You should post that to HN directly, since it hasn't been posted before.
Re:Welp, there go my Git signatures by hdhzy on Wednesday October 25, 2017 @02:43PM (#15552918)
Git's underlying data model is simple yet extremely flexible (see e.g. [0]), well just like OpenPGP I guess.

As for the article you're welcome to post it yourself :)

[0]: https://github.com/google/git-appraise