{"thread":{"id":"60576","subject":"git:// warn as connection not secure","startedAt":"2023-12-01T11:57:44Z","lastAt":"2023-12-05T20:42:05Z","messageCount":3,"participants":["Jonny Grant","Eric Wong"],"isPatch":false,"patchVersion":null,"patchTotal":null},"messages":[{"id":"485305","messageId":"b6e0f49a-34ff-4e8e-9c3e-b8fd41d59f68@jguk.org","threadId":"60576","inReplyTo":null,"subject":"git:// warn as connection not secure","fromName":"Jonny Grant","fromEmail":"jg@jguk.org","sentAt":"2023-12-01T11:57:42Z","receivedAt":"2023-12-01T11:57:44Z","isPatch":false,"sender":{"key":"jg@jguk.org","avatar":null},"body":"Hello\nMay I ask if anyone has suggested adding a default warning that git:// is not a secure connection?\n\nie \"warning: git:// is not a secure connection. https and ssh are secure.\"\n\n$ git clone git://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git\nCloning into 'linux'...\nremote: Enumerating objects: 9863119, done.\nremote: Counting objects: 100% (2360/2360), done.\nremote: Compressing objects: 100% (1282/1282), done.\n^Cceiving objects:   0% (8779/9863119), 3.21 MiB | 6.41 MiB/s\n\nKind regards\nJonny\n"},{"id":"485309","messageId":"20231201212423.M738201@dcvr","threadId":"60576","inReplyTo":"b6e0f49a-34ff-4e8e-9c3e-b8fd41d59f68@jguk.org","subject":"Re: git:// warn as connection not secure","fromName":"Eric Wong","fromEmail":"e@80x24.org","sentAt":"2023-12-01T21:24:23Z","receivedAt":"2023-12-01T21:24:24Z","isPatch":false,"sender":{"key":"e@80x24.org","avatar":null},"body":"Jonny Grant <jg@jguk.org> wrote:\n> Hello\n> May I ask if anyone has suggested adding a default warning that git:// is not a secure connection?\n> \n> ie \"warning: git:// is not a secure connection. https and ssh are secure.\"\n\nTo be accurate, that would need an exclusion list of hosts behind\nalready-encrypted and trusted networks.  So stuff like .onion hostnames\nfor Tor, and a user-configurable list of hosts in a private LAN/VPN.\n"},{"id":"485358","messageId":"ac8cf97f-53eb-43df-b95e-2d05753bf056@jguk.org","threadId":"60576","inReplyTo":"20231201212423.M738201@dcvr","subject":"Re: git:// warn as connection not secure","fromName":"Jonny Grant","fromEmail":"jg@jguk.org","sentAt":"2023-12-05T20:42:02Z","receivedAt":"2023-12-05T20:42:05Z","isPatch":false,"sender":{"key":"jg@jguk.org","avatar":null},"body":"\n\nOn 01/12/2023 21:24, Eric Wong wrote:\n> Jonny Grant <jg@jguk.org> wrote:\n>> Hello\n>> May I ask if anyone has suggested adding a default warning that git:// is not a secure connection?\n>>\n>> ie \"warning: git:// is not a secure connection. https and ssh are secure.\"\n> \n> To be accurate, that would need an exclusion list of hosts behind\n> already-encrypted and trusted networks.  So stuff like .onion hostnames\n> for Tor, and a user-configurable list of hosts in a private LAN/VPN.\n\nThat sounds good Eric.\n\nOr even just an info message?\n\n\"info: git:// itself is an unencrypted connection. https and ssh are secure.\"\n\nKind regards\nJonny\n"}]}