Re: [RFE] Migration to gitlab

[Stefan Monnier]

>> I expect it's safer to "git fetch + git diff" from a random machine out
>> there than it is to have your MUA process a random email from
>> a random person.
> Really?  Doesn't the mail server from which I fetch email do something
> to protect me?

It probably runs some anti-virus scanner.  If you believe in anti-virus
scanners, then maybe you'll count that as improving your security a bit.

But it's not like Git doesn't do its due diligence in sanity checking.
And "git diff" can't generate a malware attachment (it can spew junk
but that should be no more harmful than if it were attached to an
email).

It's not like I completely trust in Git's C code, but since that same
code is used by many Git servers, I think it's likely that it's been
reasonably scrutinized and is at least as safe as your MUA (probably
safer than any Elisp MUA).


        Stefan