On 01/30/2014 10:35 AM, Edward Ned Harvey (blu) wrote:
>> From: discuss-bounces+blu=nedharvey....@blu.org [mailto:discuss-
>> bounces+blu=nedharvey....@blu.org] On Behalf Of Chris Johnson
>>
>> You'll need to get your team to use SSH keys, but that's standard
>> practice for most git management systems (e.g. gitolite).
> 
> That may have been true at some point, but now, it works just as well over 
> http or https.
> 
> I will say, if you use http, the user's password goes across the wire 
> plaintext.  (I confirmed with wireshark.)  So my recommendation would be to 
> plan on using SSL right from the start.  Every step along the way in the 
> gitlab installer, substitute "https" for "http" and so forth.

True, and good point. Personally, I like SSH keys, but do you know of
any reasons to prefer HTTPS to SSH, apart from key management?

_______________________________________________
Discuss mailing list
Discuss@blu.org
http://lists.blu.org/mailman/listinfo/discuss

Reply via email to