git/list[1] front-page[2] threads[3] people[4] search[5] about
 

Re: git:// warn as connection not secure

From
JGJonny Grant <jg@jguk.org>
Date
Dec 5, 2023, 20:42 UTC
Message-ID
<ac8cf97f-53eb-43df-b95e-2d05753bf056@jguk.org>
In-Reply-To
<20231201212423.M738201@dcvr>
On 01/12/2023 21:24, Eric Wong wrote:
Show 9 quoted lines
> Jonny Grant <jg@jguk.org> wrote:
>> Hello
>> May I ask if anyone has suggested adding a default warning that git:// is not a secure connection?
>>
>> ie "warning: git:// is not a secure connection. https and ssh are secure."
> 
> To be accurate, that would need an exclusion list of hosts behind
> already-encrypted and trusted networks.  So stuff like .onion hostnames
> for Tor, and a user-configurable list of hosts in a private LAN/VPN.
That sounds good Eric.
Or even just an info message?
"info: git:// itself is an unencrypted connection. https and ssh are secure."

Kind regards Jonny

Previous: Eric Wong
Message 3 of 3 in “git:// warn as connection not secure”
  1. Jonny GrantDec 1, 2023
  2. Eric WongDec 1, 2023
  3. Jonny GrantDec 5, 2023

Read the whole thread, see it on lore, or plain text.

$ cat FOOTERMessages come from the public archive at lore.kernel.org/git, fetched every hour. The front page is chosen and written each morning by an AI editor and can be wrong; the threads themselves are the record. About and API. For agents: an MCP server at https://gitlist.dev/mcp, and any thread, story or person page as Markdown by adding .md to its URL (or sending Accept: text/markdown). Details in /llms.txt.