Re: Fetch/push lets a malicious server steal the targets of "have" lines
- From
Matt McCutchen <matt@mattmccutchen.net>
- Date
- Oct 29, 2016, 03:33 UTC
- Message-ID
- <1477712029.2904.64.camel@mattmccutchen.net>
- In-Reply-To
- <xmqq7f8sx8lg.fsf@gitster.mtv.corp.google.com>
On Fri, 2016-10-28 at 18:11 -0700, Junio C Hamano wrote:
> Ah, I see. My immediate reaction is that you can do worse things in > the reverse direction compared to this, but your scenario does sound > bad already.
Are you saying that clients connecting to untrusted servers already face worse risks that people should know about, so there is no point in documenting this one? I guess I don't know about the other risks aside from accepting a corrupt object, which should be preventable by enabling fetch.fsckObjects. It seems we need either a statement that connecting to untrusted servers is officially unsupported or a description of the specific risks.
Matt