On Sat 06 Aug 2016 09:52, Andreas Enge <andr...@enge.fr> writes: > I am not very happy about such a policy; if I sign a commit, I am only > signing my commit, and not all of its history
For what it's worth, this is not quite true. The SHA1 hashes of parent commits are part of the commit object itself, so if you sign a commit you are also signing its history. Andy
