Do not recommend the use unauthenticated git cloning
ypid opened this issue · comments
The README gives an example like this:
cd ~/.vim/bundle && \
git clone git://github.com/tpope/vim-sensible.gitwhich should really be:
cd ~/.vim/bundle && \
git clone https://github.com/tpope/vim-sensible.gitThe problem is that the git protocol has no message authentication.
This issue seems to also effect your Vim plugins.
It's actually been on my todo list to replace all my URLs with a hosting agnostic redirect. Something like
git clone https://tpope.io/vim/sensible.git
It's actually been on my todo list to replace all my URLs with a hosting agnostic redirect.
Sounds good. In that case you could maybe even completely self host the mirror instead of redirecting?