From: Paul Jakma Date: Mon, 25 Apr 2005 03:08:39 GMT Subject: Re: Git-commits mailing list feed. Message-ID: In-Reply-To: Ah, to add to below.. If one wished, one could optionally store the actual signature data as a seperate blob object and refer to it in the signing object. Not needed really for a GPG ASCII clear-signed detached signature (tiny and they're ASCII obviously :) ), but who knows. On Mon, 25 Apr 2005, Paul Jakma wrote: > - add the 'signature object' to the respository after the signed > object > > So a 'signed commit' turns into the > > - tool preparing the commit object, > - get the user to sign it > - save the detached signature for later > - adding the commit object to the repository - adding the signature blob, if it is to stored as a blob > - prepare the signing object and add to repository > The repository head then refers then to signature object, which could > (handwaving) look something like: > > Object Signature > Signing