Re: [PATCH] git-send-email: add ~/.authinfo parsing
From: Junio C Hamano <hidden>
Date: 2016-06-15 22:56:04
Jeff King [off-list ref] writes:
On Tue, Jan 29, 2013 at 11:53:19AM -0800, Junio C Hamano wrote:quoted
Either way it still encourages a plaintext password to be on disk, which may not be what we want, even though it may be slight if not really much of an improvement. Again the Help-for-users has this amusing bit:I do not mind a .netrc or .authinfo parser, because while those formats do have security problems, they are standard files that may already be in use. So as long as we are not encouraging their use, I do not see a problem in supporting them (and we already do the same with curl's netrc support). But it would probably make sense for send-email to support the existing git-credential subsystem, so that it can take advantage of secure system-specific storage. And that is where we should be pointing new users. I think contrib/mw-to-git even has credential support written in perl, so it would just need to be factored out to Git.pm.
I see a lot of rerolls on the credential helper front, but is there anybody working on hooking send-email to the credential framework?