Do `git clone gcrypt::` and `git pull` verify the signatures of commiters?

Benjamin-Loison / git-remote-gcrypt

PGP-encrypted git remotes

https://spwhitton.name/tech/code/git-remote-gcrypt/

GNU General Public License v3.0

0 stars 0 forks source link

Do `git clone gcrypt::` and `git pull` verify the signatures of commiters? #6

Open Benjamin-Loison opened 12 months ago

Benjamin-Loison commented 12 months ago

In other words does appending --verify-signatures is useful in a given scenario?

Benjamin-Loison commented 1 month ago

As the person:

``` -----BEGIN PGP MESSAGE----- hF4DTQa9Wom5MBgSAQdArvZbRtUMsBsLLOSQTkU+oGV9YwBERqb+VY/oNV1tL38w VEm3Z7u8EKp6SYEnWjDi4/BZv5YMopSenR/MLFUls+AJy3zMKspAl9rPQjWJxfZe 0kABg8Udig0C5zJ87fegJvmtY9NguKIJVmTxsWxzzr7ndqf6Jol20dNj5lQyW6jz i1HXgZWCRHAd7v//6PDLJiXS =HnP8 -----END PGP MESSAGE----- ```

does not verify signatures while using such Git encryption.