The recent discussion [0] on commit signing was based on a 2023 article, and one of the complaints was about older signed commits getting marked as unverified on forge UIs after revocation.
That was true in 2023, but GitHub recently (Dec 2024) added support for persistent commit signature verification so this behaviour is now changed.
The recent discussion [0] on commit signing was based on a 2023 article, and one of the complaints was about older signed commits getting marked as unverified on forge UIs after revocation.
That was true in 2023, but GitHub recently (Dec 2024) added support for persistent commit signature verification so this behaviour is now changed.
[0]: https://news.ycombinator.com/item?id=43790270