[Discuss] first time build of GIT server

Chris Johnson effigies at riseup.net
Thu Jan 30 11:04:11 EST 2014


On 01/30/2014 10:35 AM, Edward Ned Harvey (blu) wrote:
>> From: discuss-bounces+blu=nedharvey.com at blu.org [mailto:discuss-
>> bounces+blu=nedharvey.com at blu.org] On Behalf Of Chris Johnson
>>
>> You'll need to get your team to use SSH keys, but that's standard
>> practice for most git management systems (e.g. gitolite).
> 
> That may have been true at some point, but now, it works just as well over http or https.
> 
> I will say, if you use http, the user's password goes across the wire plaintext.  (I confirmed with wireshark.)  So my recommendation would be to plan on using SSL right from the start.  Every step along the way in the gitlab installer, substitute "https" for "http" and so forth.

True, and good point. Personally, I like SSH keys, but do you know of
any reasons to prefer HTTPS to SSH, apart from key management?



More information about the Discuss mailing list