Https password present in git output

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 




Sometimes using ssh is not possible and saving https password in plain text to disk may be desireable (in case of encrypted disk it would be equivalent security with caching password in memory).

One possibility for this in git is to save remote in the https://username:password@xxxxxxxxxx/repo.git format. However, in this case every time you push or pull, the remote address, including the plain text password.
That would introduce additional security issiues and is unreasonable?

Wouldn't it make sense to scrabble the password part in remote's url before printing it to output?
--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Linux Kernel Development]     [Gcc Help]     [IETF Annouce]     [DCCP]     [Netdev]     [Networking]     [Security]     [V4L]     [Bugtraq]     [Yosemite]     [MIPS Linux]     [ARM Linux]     [Linux Security]     [Linux RAID]     [Linux SCSI]     [Fedora Users]