3 ms·
Considering a long term project, signing using a private GPG key does not seem to be practical. What happens if the key expires? What happens if the key gets re
by jxy 11y ago
Considering a long term project, signing using a private GPG key does not seem to be practical. What happens if the key expires? What happens if the key gets revoked? Or stolen? Are you going to sign every commit again?
- minitech 11y agoJust sign new commits with the new key. Signing a commit also signs its history.