01▲A Multi-Month Study of Git Commit Signing arxiv.org Three months, 22 CS students, and Git commit signing turns out to be fiddly, unverifiable, and mostly misunderstood.arxivcryptographysecuritysignaturessoftware-supply-chainusability0 pts/iimai/5 days ago/2 comments