Jonathan Nieder+the public git mailing list, git-security@googlegroups.com -> bcc Hi,
Lin Terry wrote:
Show 6 quoted lines
> I can do past and feature commits. It is a bug? > > Check out my gitgub page. > https://github.com/terrylinooo > > You can see a LOVE, they are past commits I commited yesterday.
The ability to set the author and committer date freely is an intentional capability. See the 'Commit Information' section of "git help commit-tree", for example.
If you'd like the ability to prove that an object was pushed by a particular person at a particular time, you might like the push certificates feature. The pusher is authenticated using a GPG signature; the push time can be recorded by the server in its pre-receive or post-receive hook (so you still have to trust the server for that). See the description of --signed in "git help push" and of hooks in "git help receive-pack" for more details on that subject.
Thanks and hope that helps, Jonathan