From 44c048adfce9ed70fe81615fad1c57cc0d120dc2 Mon Sep 17 00:00:00 2001
From: Aaron LI <aly@aaronly.me>
Date: Fri, 23 Jun 2017 22:50:15 +0800
Subject: gitconfig: Sign every tag but not every commit

---
 _gitconfig | 15 +++++++++++++--
 1 file changed, 13 insertions(+), 2 deletions(-)

(limited to '_gitconfig')

diff --git a/_gitconfig b/_gitconfig
index f78dbc2..f0ea859 100644
--- a/_gitconfig
+++ b/_gitconfig
@@ -1,12 +1,18 @@
 #
 # ~/.gitconfig
-# User Git configuration file
+# User's global Git configuration file
 #
 # Credit:
 # * https://gist.github.com/pksunkara/988716
 #
+# References:
+# [1] A Git Horror Story: Repository Integrity with Signed Commits
+#     https://mikegerwitz.com/papers/git-horror-story.html
+# [2] What are the advantages and disadvantages of cryptographically
+#     signing commits and tags in Git?
+#     https://softwareengineering.stackexchange.com/a/212216
+#
 # Aaron LI
-# 2017-05-27
 #
 
 [user]
@@ -18,6 +24,11 @@
     default = simple
 
 [commit]
+    # Sign every commit
+    #gpgSign = true
+
+[tag]
+    # Sign every tag
     gpgSign = true
 
 [color]
-- 
cgit v1.2.2