Brad King schrieb: > Johannes Sixt wrote: >> Consider this: You accidentally push a branch with confidential data to a >> public repository. You notice it early, and quickly delete the branch >> using 'git push the-repo :refs/heads/that-branch'. At this time the >> objects with the confidential data are still lingering in the public >> repository. But with the current behavior noone can access them even if >> the SHA1 happens to be known. > > Might a repack (perhaps an automatic one) put the object in a pack > (perhaps in a delta chain) that can be fetched through another ref? No, assuming that-branch was the only ref that contained the objects. Even if the repack happens before the branch is deleted, the objects that were *only* in that-branch will not be sent out. -- Hannes -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
