• NeryK@sh.itjust.works
    12·
    5 hours ago

    If you do not sign your commits, you deserved to be impersonated. Well, not really, but you get the gi(s)t.

  • toastal@lemmy.ml
    7·
    8 hours ago

    Pijul decouples your identity from you commits & proves your SSH key ownership. It is a beautiful thing that you can change your name or email & not have to get a force push to update all that info since you are now just identified by the primary key from the identity server. No more worries about being embarrassed by your old Protonmail or GMail account,no more dead names in the commit history, & no care about identity stealing by just changing the config.

    • Eager Eagle@lemmy.worldEnglish
      2·
      7 hours ago

      That’s an interesting project.

      I’ll add to anyone who doesn’t already know it, that most people not using something like Pijul probably should be using a noreply email for git commits to prevent the spam, and that GitHub and potentially others already have it:

      • your-github-user@users.noreply.github.com

      I think for development processes not centered around emails this is a must have.