From: Junio C Hamano <gitster@pobox.com>
Date: Fri, 30 May 2014 20:31:45 GMT
Subject: Re: Git stash gpg prompting
Message-ID: <xmqqr43b80um.fsf@gitster.dls.corp.google.com>
In-Reply-To: <20140530202413.GD5513@sigill.intra.peff.net>

Jeff King <peff@peff.net> writes:

> However, I wonder if it is really ever going to be sane to set
> commit.gpgsign and not use something like gpg-agent.
>
> For example, if you
> were to ever "git rebase" a patch series (or even just use "git rebase
> -i" to refactor commits), you would be prompted for your passphrase to
> sign each individual patch.

Correct.

I actually doubt it is sane to set commit.gpgsign to true and trust
gpg-agent, but that is a separate issue.