On Fri, Nov 12, 2021 at 02:07:03PM +0100, 6a50120e@xxxxxxxxxx wrote: > when i want to set a http-proxy for git, the configuration goes to > ~/.gitconfig > > ``` > [http] > proxy = http://username:password@xxxxxxxxxxxxxxxx:1234 > > ``` > > So the proxy password is in cleartext written down to the config-file. The > git own password-store can not be used... even no external like pass. Have you tried including just the username, like: [http] proxy = http://username@xxxxxxxxxxx:1234 That should prompt for the password, including using your regular configured credential helpers; see 372370f167 (http: use credential API to handle proxy authentication, 2016-01-26). We don't recognize HTTP 407 ("Proxy Authentication Required") to trigger the username/password lookup, like we do for an HTTP 401. That probably wouldn't be much code to add, but I suspect it's less important for a proxy versus a regular site because you only use one proxy (and it either needs auth or it doesn't). -Peff
