On 07/05/2015 04:01 PM, William Hubbs wrote: > All, > > I've been hearing lately that the newest versions of git allow you to > sign pushes. > > Once we have a version of git stable that allows this, can someone fill > me in on why we would need to sign commits if we sign pushes? If we have > a signature on the push, we know where that came from, so it seems to be > overkill to sign the commits as well. >
The link Robin posted is a fun read and explains why: http://mikegerwitz.com/papers/git-horror-story
