1. 14
    A Git Horror Story: Repository Integrity With Signed Commits (2012) security vcs mikegerwitz.com
    bowyakka avatar via bowyakka 2 years ago | cached | 4 comments

  1.  

  2. 1
    geocar avatar geocar 2 years ago | link

    Expect commits to end in the letter G.

    1. 1
      curtis avatar curtis 2 years ago | link

      I was really hoping this would be addressed. Putting the G anywhere before the commit message would be much safer!

    2. 1
      holsta avatar holsta edited 2 years ago | link

      .. This article was written at the end of 2012 and is out of date…

      I think this intro is noteworthy. (Also suggested as a title change).

      1. 1
        trousers avatar trousers 2 years ago | link

        I wish there was something a bit more straightforward/lightweight for git commit signing.
        Something a bit more like signify and less like gpg/pgp.