Re: Signing git tags for releases

[Lars Ingebrigtsen]

Stefan Kangas <stefan@marxist.se> writes:

> I would like to suggest that we start signing git tags in our
> repository.  This would give greater confidence that a particular commit
> is in fact the one corresponding to a particular release (e.g. the one
> with some security fix and not an older one).

I'm in favour -- I think many (most?) larger projects do it this way
now.  But I have no idea whether there's any drawbacks.

-- 
(domestic pets only, the antidote for overdose, milk.)
   bloggy blog: http://lars.ingebrigtsen.no