Git Privacy
- From
- nick <nick@nicholasjohnson.ch>
- Date
- Jul 13, 2023, 16:27 UTC
- Message-ID
- <CTZ9RD9RQ5UO.3OIJX50PKMIR0@anonymous>
A couple years ago, I created git-privacy[1]. In it, I explain how having exact commit times in a Git repo, over a long enough timespan, can potentially be used to deduce private information about a developer's life. Then I go on to explain the steps to prevent this private information leakage.
I know this is low on the list of priorities when it comes to increasing one's digital privacy, but I think it still matters. It's certainly relevant to developers who need to remain anonymous while version controlling their public software.
I was wondering if it would be appropriate to implement a feature which would allow for automatic obfuscation of Git committer and author timestamps without the need to assign environment variables or use Git hooks. Perhaps a config option to automatically set the date to a time before Git was invented?
Might there a better way to implement these ideas than what I'm thinking? Please provide some feedback.
References: 1: https://git.nicholasjohnson.ch/git-privacy/