Is it possible to delete a gpg signed tag on a remote repository without having the key? I expect the answer is no, but is this true?
Another way to phrase the question: Is it possible to put permissions on tags? Or do I need gitosis for that.
Yes, you can delete any tag, branch or commit on the remote repo as git repos do not have any authorization checks themselves.