From: Matthieu Moy <matthieu.moy@grenoble-inp.fr>
Date: Fri, 27 Dec 2013 14:20:47 GMT
Subject: Re: git:// protocol over SSL/TLS
Message-ID: <vpqwqiqpe80.fsf@anie.imag.fr>
In-Reply-To: <87mwjm4c3s.fsf@igel.home>

Andreas Schwab <schwab@linux-m68k.org> writes:

> Sergey Sharybin <sergey.vfx@gmail.com> writes:
>
>> So guess we just need to recommend using https:// protocol instead of
>> git:// for our users?
>
> Given how easy it is to verify the integrity of a git repository out of
> band there isn't really much of added security by using TLS for
> transport.

You can verify integrity after the fact, but not guarantee
confidentiality ... so it again depends on the definition of "security".

-- 
Matthieu Moy
http://www-verimag.imag.fr/~moy/