News for hackers. Stuff that matters.

A comment on What does a PGP signature on a Git commit prove?. Parent comment

Re:What does a PGP signature on a Git commit prove? by shawabawa3 on Wednesday March 31, 2021 @03:35AM (#26644463)
You know anyone can push a commit "authored" by any GitHub user? And the GitHub UI will happily show as that user

Gpg signature's are the only way of having any verification at all on who wrote a commit

[ Parent | on HN ]

There are no comments on this comment yet.