Hacker News new | ask | show | jobs
by Sir_Cmpwn 2536 days ago
I assume you're the same person I've been talking to on Lobsters. Clarification: they're talking about git push over https, which is deliberately unsupported in favor of the more secure SSH push option. git.sr.ht doesn't even have access to your password, so if the server is compromised then the attacker can't dump password hashes.
1 comments

If this is indeed the case could the parent comment explain why they prefer Git via HTTPS instead of SSH?