Thread (2 messages) flat view 2 messages, 2 authors, 2016-06-15

Re: [PATCH] git-send-email: add ~/.authinfo parsing

From: Junio C Hamano <hidden>
Date: 2016-06-15 22:56:04

Jeff King [off-list ref] writes:
On Tue, Jan 29, 2013 at 11:53:19AM -0800, Junio C Hamano wrote:
quoted
Either way it still encourages a plaintext password to be on disk,
which may not be what we want, even though it may be slight if not
really much of an improvement.  Again the Help-for-users has this
amusing bit:
I do not mind a .netrc or .authinfo parser, because while those formats
do have security problems, they are standard files that may already be
in use. So as long as we are not encouraging their use, I do not see a
problem in supporting them (and we already do the same with curl's netrc
support).

But it would probably make sense for send-email to support the existing
git-credential subsystem, so that it can take advantage of secure
system-specific storage. And that is where we should be pointing new
users. I think contrib/mw-to-git even has credential support written in
perl, so it would just need to be factored out to Git.pm.
I see a lot of rerolls on the credential helper front, but is there
anybody working on hooking send-email to the credential framework?
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help