September 13-16, 2022
Dublin, Ireland + Virtual
View More Details & Registration
Note: The schedule is subject to change.

The Sched app allows you to build your schedule but is not a substitute for your event registration. You must be registered for Open Source Summit Europe 2022 to participate in the sessions. If you have not registered but would like to join us, please go to the event registration page to purchase a registration.

This schedule is automatically displayed in Irish Standard Time (UTC +1). To see the schedule in your preferred timezone, please select from the drop-down menu to the right, above "Filter by Date."

IMPORTANT NOTE: Timing of sessions and room locations are subject to change.

Back To Schedule
Thursday, September 15 • 16:10 - 16:50
Safe and Signed Git Commits with PGP - Thomas Qvidahl, Tietoevry

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Feedback form is now closed.
Working with any software project, chances are you need to be familiar with Git. And open source projects in particular, are open to contribution from anyone - even individuals with less honorable intentions. How do you know that the name and email address on a commit is legitimate? Sadly, it's easy to fake, and a momentary lapse of attention can allow an ill-intended contribution to slip through the barriers. Enter Pretty Good Privacy (PGP), and it's implementation Gnu Privacy Guard (GPG)! This is a public key cryptography protocol and software package that can help you ensure those commits are from the right person. And by cross-signing each other's keys, you can build a "web of trust" among your fellow contributors to further strengthen the bond. Git supports signing commits with PGP! In this talk we will explore a little bit of background in public key encryption and set up your very own PGP public key. Then we will look at the integration between PGP and Git in the context of signing our Git commits, and even configuring Git to know which repositories to sign and which should be unsigned.

avatar for Thomas Qvidahl

Thomas Qvidahl

Senior Software Engineer, Tietoevry
Thomas is fast approaching three decades of experience in IT meaning he's also fast becoming a Grumpy Old Man (tm). He loves anything new and shiny that runs on electricity, and is deeply fascinated by mysterious topics such as cryptography and quantum computing. With a burning love... Read More →

Thursday September 15, 2022 16:10 - 16:50 IST
Liffey B Part 2 (Level 1)