So few people sign their commits that the default is to assume commits are from ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		kelnos on Nov 5, 2020 \| parent \| context \| favorite \| on: GitHub Source Code Leak So few people sign their commits that the default is to assume commits are from where they say they are, even if they're not verified.

jfrunyon on Nov 9, 2020 [–]

Please let me know when you figure out what GitHub could reasonably do to make enough people sign their commits to change that default.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact