On 01/12/16 09:04, Jeff King wrote: > We instruct curl to always follow HTTP redirects. This is > convenient, but it creates opportunities for malicious > servers to create confusing situations. For instance, > imagine Alice is a git user with access to a private > repository on Bob's server. Mallory runs her own server and Ahem, so Mallory is female? (-blush-) :( ATB, Ramsay Jones