From: Konstantin Ryabitsev <konstantin@linuxfoundation.org>
Date: Mon, 14 Apr 2025 01:34:56 GMT
Subject: Re: How to gpg signed email patches?
Message-ID: <20250413-dancing-acoustic-marten-cc7a7d@lemur>
In-Reply-To: <fx2ofmmhkjmjqfqya5e3qvmovvmpnjepteqobcz4eia5sw64bg@yquuljpwok3f>

On Sun, Apr 13, 2025 at 07:17:26PM +0000, Klaus Frank wrote:
> how do I get "git send-email" to send the patches gpg signed?

You have to step back and ask what is the end-goal? Do you want
repudiation/attestation for your own patches, or do you want to be able to
verify that the patches sent to you by contributors are tamper-evident?

On the kernel side of things, we've been using patatt [1], which supports PGP,
SSH, and ed25519-signing of patches via a dedicated custom header, a-la DKIM.

[1] https://github.com/mricon/patatt/blob/main/README.rst

-K