From: Jeff King <peff@peff.net>
Date: Thu, 13 Mar 2008 16:01:54 GMT
Subject: Re: [Q] Encrypted GIT?
Message-ID: <20080313160154.GC30847@coredump.intra.peff.net>
In-Reply-To: <20080313155322.GA30847@coredump.intra.peff.net>

On Thu, Mar 13, 2008 at 11:53:22AM -0400, Jeff King wrote:

> You could probably do something totally external to git using bundles as
> the primitive. Store an encrypted index on the remote that says "here
> are the packs I have, and the objects they contain." Whenever you push,
> pull the index (which is of course more network-intensive than regular
> git protocol, but not as bad as pulling all the data) and calculate a
> thin-pack bundle yourself. Encrypt the bundle and store remotely.

Oh, and a scheme like this generalizes well from "there is one key" to
"N asymmetric keyholders".

> I don't know if a formal thread analysis is necessary. I think most

That should of course be "threa_t_ analysis". I of course want to
formally analyze this thread. ;)

-Peff