Why does Linux Torvalds not sign his Git commits (with GPG)? Recent example: https://github.com/torvalds/linux/commit/566cf877a1fcb6d6dc0126b076aad062054c2637
Pretty scary. How can I be sure that he really does the commits? https://news.ycombinator.com/item?id=10005577