GnuPG Github mirrors

[Peter Todd]

On Mon, Oct 26, 2015 at 04:44:43PM -0400, shawn wilson wrote:
> > Ofcourse, no one linux kernel stuff and nothing *real bad* has
> > happened to it yet, so FWIW.
> 
> *no one signs linux kernel commits/tags/etc

Actually I just checked https://github.com/torvalds/linux, and lots of
commits are signed. (mainly merges) Dunno how that's actually used in
practice, but saying "no-one" signs Linux kernel commits is definitely
wrong.

FWIW, Bitcoin Core has an explicit policy of having git master be always
signed, along with all tags. We also have hook scripts to enforce this.

-- 
'peter'[:-1]@petertodd.org
0000000000000000059b71192a95b5e19f91aa4eac2f1bb9f54befc39a84a9ae
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 650 bytes
Desc: Digital signature
URL: </pipermail/attachments/20151027/9c9ce1e6/attachment.sig>