git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: [PATCH] Update packfile transfer protocol documentation

From
Johannes Sixt <j6t@kdbg.org>
Date
Oct 31, 2009, 20:12 UTC
Message-ID
<4AEC9A3E.7030601@kdbg.org>
In-Reply-To
<20091031020634.GL10505@spearce.org>
Shawn O. Pearce schrieb:
Show 9 quoted lines
> Scott Chacon <schacon@gmail.com> wrote:
>> +Currently only 'host' is allowed in the extra information.  It's
> 
> No.  We should make this a MUST.  As in:
> 
> 	Only host-parameter is allowed in the git-proto-request.
> 	Clients MUST NOT attempt to send additional parameters.
> 
> Sending another header can cause older git-daemons to lock up.

I think you are making a wrong case here: Older git-daemons that lock up are security holes because they allow DoS attacks, and any decent admin will want to upgrade to a fixed git-daemon anyway.

Fixed git-daemons can allow extra information in addition to 'host'. I know you argued otherwise when you submitted the fix to git-daemon, but I think you were wrong already back then.

-- Hannes
Previous: Shawn O. Pearce
Message 4 of 4 in “Update packfile transfer protocol documentation”
  1. Update packfile transfer protocol documentationScott Chacon, Oct 29, 2009
  2. Junio C HamanoOct 30, 2009
  3. Shawn O. PearceOct 31, 2009
  4. Johannes SixtOct 31, 2009

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.