From: Junio C Hamano <gitster@pobox.com>
Date: Mon, 14 Nov 2016 19:00:04 GMT
Subject: Re: [PATCH] fetch/push: document that private data can be leaked
Message-ID: <xmqqbmxhyjij.fsf@gitster.mtv.corp.google.com>
In-Reply-To: <1479148088.2406.27.camel@mattmccutchen.net>

Matt McCutchen <matt@mattmccutchen.net> writes:

>> Yup, and then "do not push to untrustworthy place without checking
>> what you are pushing", too?
>
> If there is no private data in the repository, then there is no need
> for the user to check what they are pushing. As I've indicated before,
> IMO manually checking each push would not be a workable security
> measure in the long term anyway.

Then what is?  Don't answer; this is a rhetorical question.

The answer is "do not push to untrustworthy place", if you are
unable to check what you are pushing.