<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Nyall,</p>
<p>I've some doubts at what you're talking about exactly, given that
looking at <a class="moz-txt-link-freetext" href="https://github.com/qgis/QGIS/commits/master/">https://github.com/qgis/QGIS/commits/master/</a> , your own
commits don't appear to be signed ;-) Is that commits signed with
a GPG key
(<a class="moz-txt-link-freetext" href="https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits">https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits</a>)
that appear with the "Verified" green label ? Browsing recent
commit history, it seems only a minority of devs have that set up
currently, so we should allow for some grace period. I don't think
that would be an obstacle for regular contributors, but that might
be more problematic for drive-by contributors. I'm not aware of
other projects in our close surroundings that mandate that
currently.</p>
<p>Do you have particular reasons for that ? <span class="HwtZe"
lang="en"><span class="jCAhz ChMk0b"><span class="ryNqvb">To
prevent identity theft?</span></span></span></p>
<p>Even</p>
<div class="moz-cite-prefix">Le 19/06/2026 à 01:44, Nyall Dawson via
QGIS-Developer a écrit :<br>
</div>
<blockquote type="cite"
cite="mid:CAB28Asg8V6YV-yCBaa1RN3N9gn0aGWtLA5Lvgw83mzdvQG=Ppg@mail.gmail.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div dir="auto">Hi list,
<div dir="auto"><br>
</div>
<div dir="auto">Does anyone have any issues if I turn on this
branch protection setting? Is there ANY valid reason someone
isn't using signed commits today?</div>
<div dir="auto"><br>
</div>
<div dir="auto">Nyall</div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre wrap="" class="moz-quote-pre">_______________________________________________
QGIS-Developer mailing list
<a class="moz-txt-link-abbreviated" href="mailto:QGIS-Developer@lists.osgeo.org">QGIS-Developer@lists.osgeo.org</a>
List info: <a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/qgis-developer">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a>
Unsubscribe: <a class="moz-txt-link-freetext" href="https://lists.osgeo.org/mailman/listinfo/qgis-developer">https://lists.osgeo.org/mailman/listinfo/qgis-developer</a>
</pre>
</blockquote>
<pre class="moz-signature" cols="72">--
<a class="moz-txt-link-freetext" href="http://www.spatialys.com">http://www.spatialys.com</a>
My software is free, but my time generally not.
Middle finger at you AI companies whose bots are destroying the remains of the open Internet</pre>
</body>
</html>