If you want other people to be able to verify you actually created a commit/tag, git allows to sign objects with a PGP key.
Reply on news.ycombinator.com