aboutsummaryrefslogtreecommitdiff
path: root/REFERENCE.md
blob: e6d182f09ce909e1d4b053a8b99a2415da83352115643f5ab4c00c965ad6e007 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
# Git Privacy

This document references all Git timestamps that pose a privacy concern.

## Commit Object Timestamps

[Git commit objects](https://git-scm.com/docs/user-manual.html#commit-object) always have at least 2 timestamps:

* `GIT_AUTHOR_DATE` is the timestamp used for the "author" field.
* `GIT_COMMITTER_DATE` is the timestamp used for the "committer" field.

## Annotated Tag Object Timestamps

[Annotated Git tag objects](https://git-scm.com/docs/user-manual.html#tag-object) always have at least 1 timestamp:

* `GIT_COMMITTER_DATE` is the timestamp used for the "committer" field.

## GnuPG Signature Timestamps

[GnuPG signatures](https://www.gnupg.org/gph/en/manual/x135.html) on signed commits and signed annotated tags include a timestamp.

## Git Forges

Some Git forges log and/or publicly reveal when commits are pushed.

**TODO**: Investigate and document each forge's Git push logging.

## License

This file is licensed under [CC-BY-SA 4.0](LICENSE).