News for hackers. Stuff that matters.

A comment on What does a PGP signature on a Git commit prove?.

Re:What does a PGP signature on a Git commit prove? by numbsafari on Wednesday March 31, 2021 @06:33AM (#26645556)
Are there alternatives to PGP for commit/tag signing?
[ Parent | on HN ]
Re:What does a PGP signature on a Git commit prove? by upofadown on Wednesday March 31, 2021 @08:26AM (#26646320)
Not really. There are utilities that sign things (e.g. Signify) but they don't attempt to solve the difficult problem of identity management.

Also, OpenPGP is an open published standard with an extensive infrastructure of implementations. It's hard to overcome that with a new proposal.

[ Parent | on HN ]