git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: git:// warn as connection not secure

From
EWEric Wong <e@80x24.org>
Date
Dec 1, 2023, 21:24 UTC
Message-ID
<20231201212423.M738201@dcvr>
In-Reply-To
<b6e0f49a-34ff-4e8e-9c3e-b8fd41d59f68@jguk.org>
Jonny Grant <jg@jguk.org> wrote:
> Hello
> May I ask if anyone has suggested adding a default warning that git:// is not a secure connection?
> 
> ie "warning: git:// is not a secure connection. https and ssh are secure."

To be accurate, that would need an exclusion list of hosts behind already-encrypted and trusted networks. So stuff like .onion hostnames for Tor, and a user-configurable list of hosts in a private LAN/VPN.

Previous: Jonny GrantNext: Jonny Grant
Message 2 of 3 in “git:// warn as connection not secure”
  1. Jonny GrantDec 1, 2023
  2. Eric WongDec 1, 2023
  3. Jonny GrantDec 5, 2023

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.