[kelnos]

So few people sign their commits that the default is to assume commits are from where they say they are, even if they're not verified.

[jfrunyon]

Please let me know when you figure out what GitHub could reasonably do to make enough people sign their commits to change that default.