Sverre Rabbelier venit, vidit, dixit 04.05.2011 01:49: > Heya, > > On Wed, May 4, 2011 at 01:36, Richard Peterson <richard@xxxxxxxxxxxxxx> wrote: >> Thank you, and please give feedback. I'm no git pro - just a guy with an >> idea. Based on your feedback, Eric and I will steer our implementation. > > Have you looked at git notes? They seem relevant. You could use them > to sign commits after the fact, and by multiple people, etc. > Exactly. Sign and store sig in refs/notes/sigs: git rev-parse <commit> | gpg -sa | git notes --ref=sigs append -F- <commit> Verify: git notes --ref=sigs show <commit> | gpg You can sign any object (blob, tree...) that way, of course. Everything else (meaning of this sig, just like the meaning of a signed tag or a s-o-b line) is a matter of project policy. Michael -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html