Stefan Beller [off-list ref] writes:
What is the difference between signed commits and tags?
(Not from a technical perspective, but for the end user)
In addition to what the others already said:
If you use GitHub, then in the web interface you get a "Verified" stamp
for each signed commits:
https://help.github.com/articles/signing-commits-using-gpg/
It's not a Git feature but a GitHub one, but given the popularity of
GitHub, this probably led some users to believe that signed commits are
more convenient than signed tags.
--
Matthieu Moy
http://www-verimag.imag.fr/~moy/