On Sat, 4 Apr 2009, Chow Loong Jin wrote: > > It crossed my mind that currently git commits cannot actually be > verified to be authentic, due to the fact that I can just set my > identity to be someone else, and then commit under their name. You can't do that. Well, you can, but it's always going to be inferior to just adding a tag. The thing is, what is it you want to protect? The tree, the auth