Jonathan Tan <jonathantanmy@xxxxxxxxxx> writes: > Thanks everyone. I went ahead with GIT_REDACT_AUTHORIZATION to match > GIT_REDACT_COOKIES, with the default being true (i.e. you need to set it > to "0" to have behavior change). Hmm, I would actually have expected us to move in the direction of deprecating specific REDACT_BLAH and consolidate them into one, instead of adding another one. Especially as the primary reason why we redact cookies is to protect those that are used for auth anyway.