{"thread":{"id":"47759","subject":"Re: git: handling HTTPS proxy w/ password inappropriately","startedAt":"2018-02-05T17:55:20Z","lastAt":"2018-02-05T18:17:16Z","messageCount":2,"participants":["Jonathan Nieder","Yangfl"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"338223","messageId":"20180205175500.GA104086@aiede.svl.corp.google.com","threadId":"47759","inReplyTo":"handler.873424.D873424.151784496817038.ackdone@bugs.debian.org","subject":"Re: git: handling HTTPS proxy w/ password inappropriately","fromName":"Jonathan Nieder","fromEmail":"jrnieder@gmail.com","sentAt":"2018-02-05T17:55:00Z","receivedAt":"2018-02-05T17:55:20Z","isPatch":false,"sender":{"key":"jrnieder@gmail.com","avatar":"https://avatars.githubusercontent.com/u/281595?v=4"},"body":"Hi,\n\nYangfl <mmyangfl@gmail.com> wrote[1]:\n\n> not affected any more\n\nCan you say a little more about this?  Do you mean that newer versions\nof Git are working better for you or that your proxy setup changed?\n\nThis looks similar to\nhttps://public-inbox.org/git/CAHnnmh6QCnHTycbMDLjfFYoXW4dErTZoTHsPrkYdhZKnXcHHYQ@mail.gmail.com/\nto me, which makes me fear it hasn't been fixed.\n\nThanks,\nJonathan\n\n[1] http://bugs.debian.org/873424\n"},{"id":"338225","messageId":"CAAXyoMN_DYHO0BX1fn+97+GPPPFLGya3nCi4SEvDJDRL3-6=dA@mail.gmail.com","threadId":"47759","inReplyTo":"20180205175500.GA104086@aiede.svl.corp.google.com","subject":"Re: git: handling HTTPS proxy w/ password inappropriately","fromName":"Yangfl","fromEmail":"mmyangfl@gmail.com","sentAt":"2018-02-05T18:16:31Z","receivedAt":"2018-02-05T18:17:16Z","isPatch":false,"sender":{"key":"mmyangfl@gmail.com","avatar":null},"body":"2018-02-06 1:55 GMT+08:00 Jonathan Nieder <jrnieder@gmail.com>:\n> Hi,\n>\n> Yangfl <mmyangfl@gmail.com> wrote[1]:\n>\n>> not affected any more\n>\n> Can you say a little more about this?  Do you mean that newer versions\n> of Git are working better for you or that your proxy setup changed?\n>\n> This looks similar to\n> https://public-inbox.org/git/CAHnnmh6QCnHTycbMDLjfFYoXW4dErTZoTHsPrkYdhZKnXcHHYQ@mail.gmail.com/\n> to me, which makes me fear it hasn't been fixed.\n>\n> Thanks,\n> Jonathan\n>\n> [1] http://bugs.debian.org/873424\n\nI just repeated it three times to make sure it works perfectly.\nHowever, I still see 2 connection attempts in my wireshark, the first\none without password (then FINed), and the following one with.\n\n$ git --version\ngit version 2.15.1\n\nVersions of packages git depends on:\nii  git-man          1:2.15.1-3\nii  libc6            2.26-4\nii  libcurl3-gnutls  7.58.0-2\nii  liberror-perl    0.17025-1\nii  libexpat1        2.2.5-3\nii  libpcre2-8-0     10.22-5\nii  perl             5.26.1-4\nii  zlib1g           1:1.2.8.dfsg-5\n\nVersions of packages git recommends:\nii  less                         487-0.1\nii  openssh-client [ssh-client]  1:7.6p1-3\nii  patch                        2.7.5-1+b2\n\nVersions of packages git suggests:\nii  gettext-base                          0.19.8.1-4\npn  git-cvs                               <none>\npn  git-daemon-run | git-daemon-sysvinit  <none>\npn  git-doc                               <none>\npn  git-el                                <none>\npn  git-email                             <none>\npn  git-gui                               <none>\npn  git-mediawiki                         <none>\npn  git-svn                               <none>\npn  gitk                                  <none>\npn  gitweb                                <none>\n"}]}