> On 2 June 2012 03:12, Andreas K. Huettel <dilfridge@g.o> wrote:
> >> "git cat-file -p $sha" is as close as you can get to commit objects
> >> without needing to write your own decompressing wrapper.  But it gives
> >> the same results.
> > 
> > Now, does the "signed data" also contain the parent sha?
> > 
> > If yes, our discussion about rebasing is moot, because a rebase will in
> > every case destroy previous signatures.
> 
> Yes. Which basically means, you *cannot* have both
> 
> a) rebase only merges
> and
> b) every commit must be signed
> 
> as policies.
> 

I would say that this is a very strong argument in favour of allowing merge 
commits.

-- 
Andreas K. Huettel
Gentoo Linux developer
kde, sci, arm, tex, printing