From: Andreas Schwab <schwab@linux-m68k.org>
Date: Fri, 27 Dec 2013 14:12:07 GMT
Subject: Re: git:// protocol over SSL/TLS
Message-ID: <87mwjm4c3s.fsf@igel.home>
In-Reply-To: <CAErtv25JGxEs3ytAB019yajQooNs4k=bzukSE9kuHWAbir9-BQ@mail.gmail.com>

Sergey Sharybin <sergey.vfx@gmail.com> writes:

> So guess we just need to recommend using https:// protocol instead of
> git:// for our users?

Given how easy it is to verify the integrity of a git repository out of
band there isn't really much of added security by using TLS for
transport.

Andreas.

-- 
Andreas Schwab, schwab@linux-m68k.org
GPG Key fingerprint = 58CA 54C7 6D53 942B 1756  01D3 44D5 214B 8276 4ED5
"And now for something completely different."