On 05/05/2016 07:38, David Lang wrote:
> On Thu, 5 May 2016, John Crispin wrote:
>
>> On 04/05/2016 23:38, Kus wrote:
>>> Greetings
>>>
>>> I'd like to propose that all commits (at least to master) going
>>> forward be signed with the commiter's gpg key.
>>>
>>> https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work
>>>
>>> Thoughts?
>>
>> we could do that. if you look at the keyring.git, you will see that we
>> already asked those with commit access to submit their gpg keys.
>
> At that point, all you are signing is who merged the work into the tree.
> That doesn't give you any information about who created the work.
that is not what i meant. i would like to encourage people sending
patches or PRs to sign those if that is possible.
> Is there enough value in this to be worth the hassle?
to my understanding this can be automated using git.
John
_______________________________________________
Lede-dev mailing list
Lede-dev@lists.infradead.org
http://lists.infradead.org/mailman/listinfo/lede-dev
