On 05/04/2016 11:38 PM, Kus wrote: > Greetings > > I'd like to propose that all commits (at least to master) going forward be > signed with the commiter's gpg key. > > https://git-scm.com/book/en/v2/Git-Tools-Signing-Your-Work > > Thoughts?
If we would add signed commits, it should be optional as this increases the effort needed to contribute to LEDE. Currently even frightened corporate lawyers are fine with the "Signed-of by:" line in the Linux kernel. What problem would a signature solve anyway? I haven't seen this as a problem that people impersonate someone else and send patches in some else's name. Hauke
signature.asc
Description: OpenPGP digital signature
_______________________________________________ Lede-dev mailing list Lede-dev@lists.infradead.org http://lists.infradead.org/mailman/listinfo/lede-dev