git 使用全局记住用户名密码后是明文，有没有加密的方式

Question

git config --global credential.helper store

使用这个会在当前用户根目录下创建一个.git-credentials的文件用于明文保存用户名密码及相关链接

请问有没有加密后保存的方式

Answer 1

OS X:
git config --global credential.helper osxkeychain
Windows:

There’s a tool named git-credential-winstore (available at http://gitcredentialstore.codeplex.com) to store these credentials in the Windows Credential Store.

Linux/Unix:

There’s a tool named git-credentialgnome-keyring (bundled with Git 1.8.0 and above) to store these credentials in the GNOME Keyring.

Answer 2

Visual inspection shows that the ciphertext is still unsafe after being taken away. Because there are no random numbers in symmetric encryption. If you really want to be safe, you can consider using ssh for authentication and then using RSA asymmetric encryption. Then set another password on top of the asymmetric password. Tip: It is a very old method to bypass plaintext encryption and directly use ciphertext authentication. 2333