[Pkg-mozext-maintainers] Sign your git commits :)

[Ximin Luo]

(bcc all so as to not spam everyone)

I missed this when it was first released, but git now supports signed commits:

$ git commit -S

You need a passphrase to unlock the secret key for
user: "Ximin Luo <infinity0 at gmx.com>"
4096-bit RSA key, ID 5FBBDBCE, created 2010-08-03

[master cb4164e] Test
 1 file changed, 1 insertion(+), 1 deletion(-)

$ git log --show-signature -1
commit cb4164e15c246c4515fa811ebc7689ad6cf99f9f
gpg: Signature made Fri 15 Feb 2013 10:29:41 GMT using RSA key ID 5FBBDBCE
gpg: Good signature from "Ximin Luo <infinity0 at gmx.com>"
Author: Ximin Luo <infinity0 at gmx.com>
Date:   Fri Feb 15 10:29:36 2013 +0000

    Test

You can and should add -S/--show-signature for any aliases you have for commit/log respectively.

Neither of these are mentioned in the Debian man page for git 1.7.10 but this website describes its usage: http://mikegerwitz.com/docs/git-horror-story.html

Spread the word! :) This provides another reason to use GPG keys which sadly are not used enough currently.

X