Proposal to sign all commits

[John Crispin]

On 05/05/2016 07:38, David Lang wrote:
> On Thu, 5 May 2016, John Crispin wrote:
> 
>> On 04/05/2016 23:38, Kus wrote:
>>> Greetings
>>>
>>> I'd like to propose that all commits (at least to master) going
>>> forward be signed with the commiter's gpg key.
>>>
>>> https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work
>>>
>>> Thoughts?
>>
>> we could do that. if you look at the keyring.git, you will see that we
>> already asked those with commit access to submit their gpg keys.
> 
> At that point, all you are signing is who merged the work into the tree.
> That doesn't give you any information about who created the work.

that is not what i meant. i would like to encourage people sending
patches or PRs to sign those if that is possible.

> Is there enough value in this to be worth the hassle?

to my understanding this can be automated using git.

	John