[Gluster-infra] [Bug 1489417] New: Gerrit shouldn't offer http or git for code download

bugzilla at redhat.com bugzilla at redhat.com
Thu Sep 7 12:15:58 UTC 2017


https://bugzilla.redhat.com/show_bug.cgi?id=1489417

            Bug ID: 1489417
           Summary: Gerrit shouldn't offer http or git for code download
           Product: GlusterFS
           Version: mainline
         Component: project-infrastructure
          Assignee: bugs at gluster.org
          Reporter: mscherer at redhat.com
                CC: bugs at gluster.org, gluster-infra at gluster.org



git protocol is in clear text, s we should avoid it since a attackant could do
mitm and inject code that will be built (and likely executed) on user system.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
Unsubscribe from this bug https://bugzilla.redhat.com/token.cgi?t=OpY85DYnVl&a=cc_unsubscribe


More information about the Gluster-infra mailing list