git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: git-send-email with GPG signed commits?

From
Matěj Cepl <mcepl@cepl.eu>
Date
Oct 20, 2022, 21:03 UTC
Message-ID
<5c12bc9c-36b0-578b-2403-54a9bcf920b1@cepl.eu>
In-Reply-To
<004901d8e4bb$c3338360$499a8a20$@nexbridge.com>
Dne 20. 10. 22 v 21:40 rsbecker@nexbridge.com napsal(a):
Show 7 quoted lines
> As I see it, if git commit signatures become a requirement (maybe
> resulting from supply chain discussions), then using existing
> capabilities may be the most practical alternative. This would
> involve submitting signed commits in pull request via GitHub instead
> of emailing patches. I know this is not a desirable position for the
> git team, but it is currently available technology. In a pinch, that
> could satisfy the requirement.

I just think that this future is much closer than one would think. I think that for example electronic signatures and hashes are one of reasons why even SUSE is probably now going to ditch osc as a versioning system and switch to git (yay! \o/). Our partners just forced us to do so. And I really liked the true independence of git distributed development.

Best,
Matěj
-- 
https://matej.ceplovi.cz/blog/, Jabber: mcepl@ceplovi.cz
GPG Finger: 3C76 A027 CA45 AD70 98B5  BC1D 7920 5802 880B C9D8

Every true American would rather see this land face war than see
her flag lowered in dishonor.
  -- The Episcopal bishop of New York, William Manning, 1916
Previous: rsbecker@nexbridge.comNext: brian m. carlson
Message 11 of 13 in “git-send-email with GPG signed commits?”
  1. Matěj CeplOct 20, 2022
  2. Konstantin RyabitsevOct 20, 2022
  3. Matěj CeplOct 20, 2022
  4. Konstantin RyabitsevOct 20, 2022
  5. Jeff KingOct 20, 2022
  6. Junio C HamanoOct 20, 2022
  7. Junio C HamanoOct 20, 2022
  8. Jeff KingOct 20, 2022
  9. Konstantin RyabitsevOct 20, 2022
  10. rsbecker@nexbridge.comOct 20, 2022
  11. Matěj CeplOct 20, 2022
  12. brian m. carlsonOct 20, 2022
  13. Matěj CeplOct 21, 2022

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.