On Mon, May 25, 2015 at 06:43:46PM +0200, Wouter Verhelst wrote:
> Since signing changes the sha1 of the commit, only if rewriting history isn't 
> a
> problem.

A solution to this without history rewriting is to tag the commits you want
to sign.

You could tag any commit at any time, and sign that tag. Impractical if you
want to retroactively sign a huge swathe of commits, but not bad if you want
to retroactively sign a handful of releases, say.


-- 
To UNSUBSCRIBE, email to debian-devel-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20150526161232.ga14...@chew.redmars.org

Reply via email to