diff options
author | Julian Andres Klode <julian.klode@canonical.com> | 2019-12-02 11:46:49 +0100 |
---|---|---|
committer | Julian Andres Klode <julian.klode@canonical.com> | 2019-12-02 14:27:38 +0100 |
commit | 93f33052de84e9aeaf19c92291d043dad2665bbd (patch) | |
tree | 667c4240b6f6fb9c91ae20b655478508b09d6214 /doc/po | |
parent | 1690c3f87ae45a41e8d3e09bf0b1021c008460b9 (diff) |
netrc: Restrict auth.conf entries to https by default
This avoids downgrade attacks where an attacker could inject
Location: http://private.example/
and then (having access to raw data to private.example, for example,
by opening a port there, or sniffing network traffic) read the credentials
for the private repository.
Closes: #945911
Diffstat (limited to 'doc/po')
0 files changed, 0 insertions, 0 deletions