diff options
| author |  Junio C Hamano <gitster@pobox.com> | 2015-04-20 15:28:31 -0700 |
|---|---|---|
| committer | Junio C Hamano <gitster@pobox.com> | 2015-04-20 15:28:31 -0700 |
| commit | 268d5bc2b2a6f261c6da99c3c9557426468a765b (patch) | |
| tree | d7787ad5d04e74439f65bfe72542b44d97599511 /t/t2202-add-addremove.sh | |
| parent | Merge branch 'ma/bash-completion-leaking-x' (diff) | |
| parent | push --signed: tighten what the receiving end can ask to sign (diff) | |
| download | tgif-268d5bc2b2a6f261c6da99c3c9557426468a765b.tar.xz | |
Merge branch 'jc/push-cert'
The "git push --signed" protocol extension did not limit what the
"nonce" that is a server-chosen string can contain or how long it
can be, which was unnecessarily lax. Limit both the length and the
alphabet to a reasonably small space that can still have enough
entropy.
* jc/push-cert:
push --signed: tighten what the receiving end can ask to sign
Diffstat (limited to 't/t2202-add-addremove.sh')
0 files changed, 0 insertions, 0 deletions