Comment by josephg

Yeah you’ve been able to do this for over a decade. They can’t really stop it:

- Git commits form an immutable merkel dag. So commits can’t be changed without changing all subsequent hashes in a git tree

- Commits by default embed your email address.

I suppose GitHub could hide the commit itself, and make you download commits using the cli to be able to see someone’s email address. Would that be any better? It’s not more secure. Just less convenient.