sindresorhus/ama

What do you think about signing commits using GPG?

Closed this issue · 1 comments

What do you think about signing commits using GPG?

I think commit signing is important, but I also think GPG is awful. I'm hoping GitHub will make the GPG tooling more user-friendly or come up with a better solution. I rarely see signed commits in repos, which is quite telling.