From a72d345f9fd07b9878be09aea90ed53e2e2648c6923ac7fb9abc934daa31e72d Mon Sep 17 00:00:00 2001 From: Nicholas Johnson Date: Thu, 30 Nov 2023 00:00:00 +0000 Subject: Switch to the Diátaxis documentation approach MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- REFERENCE.md | 30 ++++++++++++++++++++++++++++++ 1 file changed, 30 insertions(+) create mode 100644 REFERENCE.md (limited to 'REFERENCE.md') diff --git a/REFERENCE.md b/REFERENCE.md new file mode 100644 index 0000000..e6d182f --- /dev/null +++ b/REFERENCE.md @@ -0,0 +1,30 @@ +# Git Privacy + +This document references all Git timestamps that pose a privacy concern. + +## Commit Object Timestamps + +[Git commit objects](https://git-scm.com/docs/user-manual.html#commit-object) always have at least 2 timestamps: + +* `GIT_AUTHOR_DATE` is the timestamp used for the "author" field. +* `GIT_COMMITTER_DATE` is the timestamp used for the "committer" field. + +## Annotated Tag Object Timestamps + +[Annotated Git tag objects](https://git-scm.com/docs/user-manual.html#tag-object) always have at least 1 timestamp: + +* `GIT_COMMITTER_DATE` is the timestamp used for the "committer" field. + +## GnuPG Signature Timestamps + +[GnuPG signatures](https://www.gnupg.org/gph/en/manual/x135.html) on signed commits and signed annotated tags include a timestamp. + +## Git Forges + +Some Git forges log and/or publicly reveal when commits are pushed. + +**TODO**: Investigate and document each forge's Git push logging. + +## License + +This file is licensed under [CC-BY-SA 4.0](LICENSE). -- cgit v1.2.3