4 ms·
It has signing information in it, which does seem necessary to authenticate commits.
by justincormack 6y ago
It has signing information in it, which does seem necessary to authenticate commits.
- nextaccountic 6y agobut git itself has signed commits and tags.
- justincormack 6y agoYes, but it does not tell you which signatures are valid in this repo, this is something that is external, eg GitHub lets you manage a list. You need this information to validate the signed commits.