On Thu, Nov 22, 2018 at 04:07:33AM +0800, Alex Vong wrote:
> I think ECC key works with commit signing precisely because commit
> signing simply requires Savannah to store the key. However, for
> functionalities provided by Savannah (e.g. sending email to your address
> encrypted with your ECC public key), it wouldn't work (as mentioned in
> <https://savannah.gnu.org/support/?109583>).

To clarify, Savannah doesn't require you to store any key at all in
order to sign Git commits. I think that Savannah accounts don't
integrate with Git at all; they simply offer hosted Git repositories,
and commit signing is a feature of Git.

We require Guix contributors to upload their keys to their Savannah
account so that there is an authoritative source of signing keys.