# verify signature hook 3 messages from 2013-04-29 to 2013-04-30. Participants: shawn wilson, Junio C Hamano. Thread: https://gitlist.dev/t/33671 ## shawn wilson, 2013-04-29 16:32 Subject: verify signature hook Message-ID: URL: https://gitlist.dev/e/CAH_OBieXyHuQBpG7Ge1wA4Q%2BMKBEy7MD-TpZmMLZjEF0jAzLwg%40mail.gmail.com ``` How do I complain when a commit/merge/tag/etc aren't signed? Ie, everything should be signed and I'd like a hook that complains loudly if something isn't signed (or if a signature isn't verifiable). Also, how do I default to signing everything? ``` ## Junio C Hamano, 2013-04-29 16:42 Subject: Re: verify signature hook Message-ID: <7vy5c1jnl0.fsf@alter.siamese.dyndns.org> URL: https://gitlist.dev/e/7vy5c1jnl0.fsf%40alter.siamese.dyndns.org In-Reply-To: ``` shawn wilson writes: > How do I complain when a commit/merge/tag/etc aren't signed? At which point? A natural place would be to detect this just before accepting a suspicious history being pushed in pre-receive hook, I think. ``` ## shawn wilson, 2013-04-30 11:54 Subject: Re: verify signature hook Message-ID: URL: https://gitlist.dev/e/CAH_OBidNMOx7nAU01Tfpe6FBPnu4n_GhdSUctp4zF9pJACPEjQ%40mail.gmail.com In-Reply-To: ``` Apparently GMail for Android only sends HTML encoded emails (and the list rightly rejected it). On Mon, Apr 29, 2013 at 4:31 PM, shawn wilson wrote: > > On Apr 29, 2013 12:42 PM, "Junio C Hamano" wrote: >> >> shawn wilson writes: >> >> > How do I complain when a commit/merge/tag/etc aren't signed? >> >> At which point? A natural place would be to detect this just before >> accepting a suspicious history being pushed in pre-receive hook, I >> think. > > I was thinking of adding it to a post hook I've got that emails a report > but > I'm not opposed to just stopping it from happening. ```