From: Matt McCutchen <matt@mattmccutchen.net>
Date: Mon, 14 Nov 2016 19:08:02 GMT
Subject: Re: [PATCH] fetch/push: document that private data can be leaked
Message-ID: <1479150482.2406.35.camel@mattmccutchen.net>
In-Reply-To: <xmqqbmxhyjij.fsf@gitster.mtv.corp.google.com>

On Mon, 2016-11-14 at 11:00 -0800, Junio C Hamano wrote:
> Matt McCutchen <matt@mattmccutchen.net> writes:
> 
> > 
> > > 
> > > Yup, and then "do not push to untrustworthy place without
> > > checking
> > > what you are pushing", too?
> > 
> > If there is no private data in the repository, then there is no
> > need
> > for the user to check what they are pushing. As I've indicated
> > before,
> > IMO manually checking each push would not be a workable security
> > measure in the long term anyway.
> 
> Then what is?

Don't put private data in the same repository, then the whole issue
becomes moot.  Am I missing something?

Matt