Https password present in git output

2 messages, 2 authors, 2016-07-13 · open the first message on its own page

Https password present in git output

From: ervion <hidden>
Date: 2016-07-13 17:56:05

Sometimes using ssh is not possible and saving https password in plain 
text to disk may be desireable
(in case of encrypted disk it would be equivalent security with caching 
password in memory).

One possibility for this in git is to save remote in the 
https://username:password@domain.com/repo.git format.
However, in this case every time you push or pull, the remote address, 
including the plain text password.
That would introduce additional security issiues and is unreasonable?

Wouldn't it make sense to scrabble the password part in remote's url 
before printing it to output?

Re: Https password present in git output

From: Dennis Kaarsemaker <hidden>
Date: 2016-07-13 18:16:30

On wo, 2016-07-13 at 20:26 +0300, ervion wrote:
One possibility for this in git is to save remote in the 
https://username:password@domain.com/repo.git format.
This is not recommended. Git has credential helpers to help you store
passwords outside the git configuration.

Which then makes your original problem go away :)

D.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help