On 21.03.2023 18:33, Demi Marie Obenour wrote: > Obtaining code over an insecure transport is a terrible idea for > blatently obvious reasons. Even for non-executable data, insecure > transports are considered deprecated. > > This patch enforces the use of secure transports for all xenbits.xen.org > Git repositories. It was generated with the following shell script: > > git ls-files -z | > xargs -0 -- sed -Ei -- > 's@(git://xenbits\.xen\.org|http://xenbits\.xen\.org/git-http)/@https://xenbits.xen.org/git-http/@g'
I thought I had asked already, but looking through earlier conversation it looks like I only meant to: Why not git+ssh:// instead? Iirc there are efficiency differences between http and git protocols. Jan
