[LEDE-DEV] Proposal to sign all commits

[Kus]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Daniel, I like what you said. I hinted something like that in the original message.

I don't like the idea of making changes to history after it is published. Personally, I don't care about commit pollution but if the team thinks it is important, then we should squash commits before we merge with master.

In an ideal world, we'd make all commits on master and we'd have 100% confidence that each commit is guaranteed to cause no regression. If wishes were fishes...

Maybe require all commits in master be signed and encourage but not require signing for others? Would that be acceptable?
-----BEGIN PGP SIGNATURE-----
Version: APG v1.1.1

iQJRBAEBCgA7BQJXLTagNBxLdXNoYWwgSGFkYSAoZGV2ZWxvcGVyKSA8a3VzaGFs
ZGV2ZWxvcGVyQGdtYWlsLmNvbT4ACgkQJsInd2b1xmMrmA//bDIfIJ+r2WHWNJlD
PwZ/VG9cbiUBAmdiVZkOhP0W9J25GffIfDs+s411QfK6tNM4mIwl7dC/dHk/fQUJ
53lKL7WoRHmOHlOzocMynsjhsm4aib76afNKBA3+b0mU8t2c6JYFWNe7EbFhQAV6
JrTjhW7k9nz8A/hfrTvzlh+qSzOgD3NuMbDPATtDCGao6+RVYtQAI3PuSr01rGM6
4ogFIjKitWUQd/ci2yw6xoIU//4jswAnbETdt2Eqf8J+vnOxX9Z8VEriJn1wD/t3
i0T9MQcHyCTUAKcoxz2fr4CFkHq6RA55Nmy25Um6IN1N62Yb3Hc9yAMID1BIAtyA
HCLZwzTm+H6jyeXYH7fECiM9jJrWhWbt2oBLABldd7GsU2fxxH2JcHs/3LK7wfux
PuO3NoOm1OydxR4A/A0l0PmMQvlsS0EFN4JI53ENboLnEYkeY/j0hBkrMpTxTGUy
8+1tJYD8DV4wKHqAZ6CNdMIU6yD7ePRAvEvHsetKxEDbhXL/AVZYpvshuQ+e/9gk
N3rRSdgyAIUOF4Jnt71Y1QUjLM2RSxUZw04nNxkpdmWTiBEFXRh50cdas8sc2Ukf
rBqsyTEyOaUWPn5zK/OyVikzKzF/7fCFefTQMpO6ohJ774igttsMzzqrVpqyI88Q
xAuNA4RfA4rz10bgI4Z0wTwRasM=
=attX
-----END PGP SIGNATURE-----