4 ms·
That the committer hopes you believe they manage their PGP private key better than they manage their Git account security?
by phs318u 6y ago
That the committer hopes you believe they manage their PGP private key better than they manage their Git account security?
- asguy 6y agoWhich “git account”? Signing means you don’t need to depend on the git mirrors security to ensure you know who made a commit.
- bawolff 6y agoGit doesn't have accounts. Its a program you run on your computer.
- shawabawa3 6y agoYou know anyone can push a commit "authored" by any GitHub user? And the GitHub UI will happily show as that user Gpg signature's are the only way of having any verification at all on who wrote a commit
- phs318u 6y agoTo the above commenters, Git is also used in enterprise scenarios with private, semi-private repos that enforce corporate user auth. My initial comment was dumb and deserved downvotes, but all git usage isn't the git usage you know of.