[PATCH] documentation: add git transport security notice
From: Fraser Tweedale <hidden>
Date: 2016-06-15 22:57:53
Subsystem:
documentation, the rest · Maintainers:
Jonathan Corbet, Linus Torvalds
The fact that the git transport has no end-to-end security is easily overlooked. Add a brief security notice to the "GIT URLS" section of the documentation stating that the git transport should be used with caution on unsecured networks. Signed-off-by: Fraser Tweedale <redacted> --- Documentation/urls.txt | 3 +++ 1 file changed, 3 insertions(+)
diff --git a/Documentation/urls.txt b/Documentation/urls.txt
index 3ca122f..c218af5 100644
--- a/Documentation/urls.txt
+++ b/Documentation/urls.txt@@ -11,6 +11,9 @@ and ftps can be used for fetching and rsync can be used for fetching and pushing, but these are inefficient and deprecated; do not use them). +The git protocol provides no end-to-end security and should be used +with caution on unsecured networks. + The following syntaxes may be used with them: - ssh://{startsb}user@{endsb}host.xz{startsb}:port{endsb}/path/to/repo.git/
--
1.8.3.1