On Wed, 6 Aug 2025, Ian Jackson wrote:
>Thorsten Glaser writes ("Re: pristine-tar: please add -S (sign commit)
>option"):
>> Your article explains that very well *for a limited set of use cases*.
>
>No. It is a fully general argument that git signed commits have the
>wrong data model. The signature covers the wrong thing.
For your use case.
>It omits the target branch and therefore the status of the signed
>thing.
Yes. But there are use cases where this does not matter, as shocking
as this may seem to the unsuspecting developer.
bye,
//mirabilos
--
15:41⎜<Lo-lan-do:#fusionforge> Somebody write a testsuite for helloworld :-)
