Malleating Git commit signatures

Recently there was an article published about how you can malleate Git commit signatures ( Git Hash Chain Malleability ) : given a signed commit A, anyone can create a new signed commit A’ that is identical in all respects except that it has a different (still valid) signature and therefore also a different commit hash. Despite what the article says, I don&rsquo;t think this is actually a…