please gpg sign tags (and commits?)

[thkoch2001]

Hi,

could you please sign your git tags? Thus people can verify that they got the code you wrote and not some man-in-the-middle attack.

man git-tag

Thx!

[dgutov]

Thank you, I'll look into it for later releases.

In the meantime, note that Emacs supports package signing since 24.4, and GNU ELPA signs all packages it distributes. Though that, by itself, doesn't help other distribution channels.