From: Junio C Hamano Date: Mon, 27 Apr 2015 19:23:47 +0000 (-0700) Subject: Merge branch 'jc/push-cert' into maint X-Git-Tag: v2.3.7~3 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=631f6f1d47cc51a46c8ab48ea1178ea04cff0b8a;p=git Merge branch 'jc/push-cert' into maint The "git push --signed" protocol extension did not limit what the "nonce" that is a server-chosen string can contain or how long it can be, which was unnecessarily lax. Limit both the length and the alphabet to a reasonably small space that can still have enough entropy. * jc/push-cert: push --signed: tighten what the receiving end can ask to sign --- 631f6f1d47cc51a46c8ab48ea1178ea04cff0b8a