One of the most overlooked features of GitHub is commit verification. How does GitHub know that the commit claiming to be "Linus Torvalds" is actually him? By default, it doesn't.