From: Ketan Padegaonkar <ketanpadegaonkar@gmail.com>
Date: Mon, 19 Jul 2010 17:00:20 GMT
Subject: [http] Git error messages reveal password encoded in the URL
Message-ID: <4C4484A4.5010009@gmail.com>

Hi,

We use http to serve our git repos, in order for git to not ask me a 
username/password everytime, I've put the following in my .git/config:

[remote "origin"]
   url = https://user:pass@host/repo.git

What is discerning is that every time git encounters a problem 
connecting to the repo, I get the following error containing both my 
username and password.

error: Couldn't resolve host 'host' while accessing 
https://user:pass@host/repo.git/info/refs

I would like to suggest that the password be removed/masked from this 
error message.

-- 
Ketan
http://ketan.padegaonkar.name | http://eclipse.org/swtbot