2 ms·
I think the problem is with identity management. Maybe a universal identity provider is required.
by kumarvvr 8y ago
I think the problem is with identity management.
Maybe a universal identity provider is required.
- iamtew 8y agoYou could just GPG sign your commits, then you can know for sure where the commit is coming from.
- zaarn 8y agoAnyone can create a GPG key and start signing commits. GPG does not solve identity, it requires additional networking (like WoT or TOFU) before it can begin to function as an identity tool.