News for hackers. Stuff that matters.
Re:What does a PGP signature on a Git commit prove? by swsieber on Wednesday March 31, 2021 @02:11PM (#26650858)
That's true. I guess we were approaching worries from opposite ends.

* Did it make it to the signer intact?

* Did it make it from the signer the signer intact?

And a single signed commit is good for the second question and only (which is still a big step up from no signatures!)

There are no comments on this comment yet.