Look into it and figure out how it works :3 Are [they](https://dev.to/benjaminblack/signing-git-commits-with-modern-encryption-1koh) to be trusted?