There was a big git hoster (cough bitbucket cough) who didn’t have support for signed commits until a few months ago. But the signature is only considered good if the pubkey you uploaded contains the mail you use for logging in. Because surely no sane person would have more than one mail, right?