Revoking a GPG / SSH key must not invalidate existing commits signatures #35546
Description
Feature Description
For security reasons, revoking a GPG / SSH key must not invalidate existing commits signatures as this discourages users to follow security best practices (immediately revoke a key when there is any doubt about a possible compromise, key rotations...).
This is the behavior adopted by GitHub: https://docs.github.com/en/authentication/managing-commit-signature-verification/about-commit-signature-verification#persistent-commit-signature-verification
Screenshots
No response