It would be nice if we could create signed tags for releases.

CVS doesn't have an integrated mechanism to do this.

There is a standard extension (plugin) for gpg support. It creates a version-controlled file called .hgsigs in the root which does for signing what .hgtags does for tags: it inserts a changeset recording the signature of a given changeset so it iss more signing a repository/release than a one-sig-per-file implementation.

I've not checked it but it may have the same problem as git with [“VCSFeatureObliterate”].

Signed tags can be created with:

git-tag -s tagname [commitid]

Note that this is in conflict with [“VCSFeatureObliterate”]!