From: Shawn O. Pearce <spearce@spearce.org>
Date: Sun, 08 Feb 2009 19:47:45 GMT
Subject: Re: [PATCH JGIT] Minor : Make ObjectId, RemoteConfig Serializable
Message-ID: <20090208194745.GA30949@spearce.org>
In-Reply-To: <200902082045.22703.robin.rosenberg.lists@dewire.com>

Robin Rosenberg <robin.rosenberg.lists@dewire.com> wrote:
> söndag 08 februari 2009 20:10:24 skrev Shawn O. Pearce:
> > In the case of any of the types you are discussing there is an easy
> > canonical form for them to be written on the wire, or to read back:
> > 
> >   ObjectId     - the 20 byte SHA-1
> >   RefSpec      - the string form as it appears in the config file
> >   URIish       - the string form as it appears in the config file
>
> with our without the password?

With.

We're serializing the object, we should store as much of the data
as we have.  Clients throwing this over the wire should either be
careful with their connection (e.g. use SSL) or be careful with
the data they are throwing (e.g. don't use URIish that has password).
 
-- 
Shawn.