From: Johannes Sixt <j.sixt@viscovery.net>
Date: Wed, 14 Jan 2009 07:02:36 GMT
Subject: Re: How to pull remote branch with specified commit id?
Message-ID: <496D8E0C.5060701@viscovery.net>
In-Reply-To: <20090114165447.qdlwqqfnk4goccgg@webmail.fussycoder.id.au>

thestar@fussycoder.id.au schrieb:
>> Johannes Sixt wrote:
>>> Consider this: You accidentally push a branch with confidential data
>>> to a
>>> public repository. You notice it early, and quickly delete the branch
>>> using 'git push the-repo :refs/heads/that-branch'. At this time the
>>> objects with the confidential data are still lingering in the public
>>> repository. But with the current behavior noone can access them even if
>>> the SHA1 happens to be known.
> 
> Doesn't this line of reasoning only apply to the ssh and git transports?
>  (ie, the file and rsync transport would retrieve it regardless)

You are right. Http and rsync would happily ship the object.

-- Hannes