From: Eric Wong <e@80x24.org>
Date: Fri, 01 Dec 2023 21:24:23 GMT
Subject: Re: git:// warn as connection not secure
Message-ID: <20231201212423.M738201@dcvr>
In-Reply-To: <b6e0f49a-34ff-4e8e-9c3e-b8fd41d59f68@jguk.org>

Jonny Grant <jg@jguk.org> wrote:
> Hello
> May I ask if anyone has suggested adding a default warning that git:// is not a secure connection?
> 
> ie "warning: git:// is not a secure connection. https and ssh are secure."

To be accurate, that would need an exclusion list of hosts behind
already-encrypted and trusted networks.  So stuff like .onion hostnames
for Tor, and a user-configurable list of hosts in a private LAN/VPN.