Https password present in git output
From: ervion <hidden>
Date: 2016-07-13 17:56:05
Sometimes using ssh is not possible and saving https password in plain text to disk may be desireable (in case of encrypted disk it would be equivalent security with caching password in memory). One possibility for this in git is to save remote in the https://username:password@domain.com/repo.git format. However, in this case every time you push or pull, the remote address, including the plain text password. That would introduce additional security issiues and is unreasonable? Wouldn't it make sense to scrabble the password part in remote's url before printing it to output?