From: Nicolas Vigier <boklm@mars-attacks.org>
Date: Tue, 05 Nov 2013 00:03:30 GMT
Subject: Re: [PATCH] Add the commit.gpgsign option to sign all commits
Message-ID: <20131105000330.GY4589@mars-attacks.org>
In-Reply-To: <xmqqppqfag2e.fsf@gitster.dls.corp.google.com>

On Mon, 04 Nov 2013, Junio C Hamano wrote:

> Nicolas Vigier <boklm@mars-attacks.org> writes:
> 
> > If you want to GPG sign all your commits, you have to add the -S option
> > all the time. The commit.gpgsign config option allows to sign all
> > commits automatically.
> 
> I'm somewhat horrified to imagine the end-user experience this
> "feature" adds to the system; if one sets htis configuration and
> then runs "git rebase" or anything that internally creates or
> recreates commits, does one have to sign each and every commit, even
> if such a rebase was done merely as a trial run to see if a topic
> can be rebased to an older codebase, or something?

Yes, all rebased commits will be signed, even if it was done as a trial
run. But I don't see this as a problem. The signature indicate who did
the rebase.