{"thread":{"id":"33671","subject":"verify signature hook","startedAt":"2013-04-29T16:32:41Z","lastAt":"2013-04-30T11:54:42Z","messageCount":3,"participants":["shawn wilson","Junio C Hamano"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"215864","messageId":"CAH_OBieXyHuQBpG7Ge1wA4Q+MKBEy7MD-TpZmMLZjEF0jAzLwg@mail.gmail.com","threadId":"33671","inReplyTo":null,"subject":"verify signature hook","fromName":"shawn wilson","fromEmail":"ag4ve.us@gmail.com","sentAt":"2013-04-29T16:32:41Z","receivedAt":"2013-04-29T16:32:41Z","isPatch":false,"sender":{"key":"ag4ve.us@gmail.com","avatar":null},"body":"How do I complain when a commit/merge/tag/etc aren't signed? Ie,\neverything should be signed and I'd like a hook that complains loudly\nif something isn't signed (or if a signature isn't verifiable).\n\nAlso, how do I default to signing everything?\n"},{"id":"215868","messageId":"7vy5c1jnl0.fsf@alter.siamese.dyndns.org","threadId":"33671","inReplyTo":"CAH_OBieXyHuQBpG7Ge1wA4Q+MKBEy7MD-TpZmMLZjEF0jAzLwg@mail.gmail.com","subject":"Re: verify signature hook","fromName":"Junio C Hamano","fromEmail":"gitster@pobox.com","sentAt":"2013-04-29T16:42:03Z","receivedAt":"2013-04-29T16:42:03Z","isPatch":false,"sender":{"key":"gitster@pobox.com","avatar":"https://avatars.githubusercontent.com/u/54884?v=4"},"body":"shawn wilson <ag4ve.us@gmail.com> writes:\n\n> How do I complain when a commit/merge/tag/etc aren't signed?\n\nAt which point?  A natural place would be to detect this just before\naccepting a suspicious history being pushed in pre-receive hook, I\nthink.\n"},{"id":"215984","messageId":"CAH_OBidNMOx7nAU01Tfpe6FBPnu4n_GhdSUctp4zF9pJACPEjQ@mail.gmail.com","threadId":"33671","inReplyTo":"CAH_OBifz0k-mNw2fkzkSKozDTuaWMYX=vJD1U8aOdJuU4kMKRA@mail.gmail.com","subject":"Re: verify signature hook","fromName":"shawn wilson","fromEmail":"ag4ve.us@gmail.com","sentAt":"2013-04-30T11:54:42Z","receivedAt":"2013-04-30T11:54:42Z","isPatch":false,"sender":{"key":"ag4ve.us@gmail.com","avatar":null},"body":"Apparently GMail for Android only sends HTML encoded emails (and the\nlist rightly rejected it).\n\nOn Mon, Apr 29, 2013 at 4:31 PM, shawn wilson <ag4ve.us@gmail.com> wrote:\n>\n> On Apr 29, 2013 12:42 PM, \"Junio C Hamano\" <gitster@pobox.com> wrote:\n>>\n>> shawn wilson <ag4ve.us@gmail.com> writes:\n>>\n>> > How do I complain when a commit/merge/tag/etc aren't signed?\n>>\n>> At which point?  A natural place would be to detect this just before\n>> accepting a suspicious history being pushed in pre-receive hook, I\n>> think.\n>\n> I was thinking of adding it to a post hook I've got that emails a report\n> but\n> I'm not opposed to just stopping it from happening.\n"}]}