On Fri, Jun 1, 2012 at 5:53 PM, Rich Freeman <ri...@gentoo.org> wrote: > If you want the tree to be traceable to Gentoo devs, then rewriting > the signatures is probably a good thing.
I'd say that signing the merge commit is good enough. It says the Gentoo dev who merged it has reviewed the changes and can be held responsible for them. One could even say that he mediates a web-of-trust to the more casual contributor who signed the original csets. Cheers, Dirkjan
