On Sun, Jan 12, 2020 at 09:51:22PM +0100, Gerald Pfeifer wrote: > On Sun, 12 Jan 2020, Andi Kleen wrote: > > By popular demand, I did some updates to the git documentation how > > to use --reference to save disk space. > > > > Also recommend https instead of http (even though both are currently > > broken) > > Thank you, Andi. Why https over http in this case? Isn't git itself > cryptographically secured? To avoid man in the middle injections via > an "alternate" repository presented?
git is secure once you have the hashes, but I don't think the protocol itself is secure. So a MITM could give you some bogus hashes. > > Below is a minor update on top of yours that I applied. Hope that's > fine. Thanks. -Andi
