[LEDE-DEV] Proposal to sign all commits

Daniel Dickinson lede at daniel.thecshore.com
Fri May 6 09:05:23 PDT 2016


On 16-05-06 11:55 AM, Kus wrote:
> 
>> Regarding signing commits with GPG key, it would be nice to recommend it but making it a requirement sounds like a barrier.
> 
> I'd argue such a barrier is OK if we want to quickly increase the size of the team of people with commit access. I think we're underestimating our contributors here. I agree that we shouldn't have unnecessary barriers (such as copyright assignment to give a specific example).
> 
> I am getting mixed signals here though. Some people say requiring signing causes friction and limits participation. Others say that there will only be a couple of people who will ever have commit access so signing is unnecessary.

I'm now confused what the proposal is.  I thought it was that everyone
(including people doing pull requests, not just LEDE comitters) should
be required to gpg sign commits.

If it's just LEDE committers then that's a completely different ball
game, and makes perfect sense.

Regards,

Daniel





More information about the Lede-dev mailing list