On Fri, 2023-06-09 at 22:11 +0300, Ariel Miculas wrote: > Yes, but then how can you be sure that amiculas@xxxxxxxxx is the real > author of the commit? I think that's why Miguel Ojeda asked me to > send them from my business email, otherwise some random gmail account > could claim that he is "Ariel Miculas", so he's entitled to sign-off > as amiculas@xxxxxxxxx. Because it's a public list and the real one would observe and repudiate ... The DCO is an attestation which we basically believe absent any proof to the contrary. It's also exhausting and an incredible amount of pointless admin not to believe anything until it's proved, which is why we don't. James
