[some_furry]

> Which, from where I stand, means that PGP is the only viable solution because I don't have a choice.

You don't have a choice today. You could have a choice tomorrow if enough people demanded it.

Don't let PGP's convenience (in this context) pacify you from making a better world possible.

[palata]

I agree with that. But I feel like I have been reading for years that there is really no reason to use PGP, and I have tried for years to use alternatives, but the fact remains that I still need to use PGP, either because it is mandatory or because in some cases the alternatives are not practical.

To me, there will be no reason to use PGP the day I find practical alternatives for the remaining use-cases I have. And I feel like signing git commits is not a weird use-case...

[tptacek]

Does the GnuPG project sign its git commits with PGP?

[KooBaa]

Of course it does, and all released software and tarballs as well.

[palata]

Not sure what you are trying to say