Slashdot Mirror

← Back to Stories (view on slashdot.org)

GitHub Drops Support for Weak Cryptographies, Adds Emojis for Labels (github.com)

Posted by EditorDavid on from the fresh-commits dept.

An anonymous reader writes: GitHub has quietly made a few changes this month. Labels for issues and pull requests will now also support emojis and on-hover descriptions. And they're also deprecating the anonymous creation of "gist" code snippets on March 19th, since "as the only way to create anonymous content on GitHub, they also see a large volume of spam." Current anonymous gists will remain accessible.

But the biggest change involves permanently removing support for three weak cryptographic standards, both on github.com and api.github.com.
The three weak cryptography standards that are no longer supported are:
  • TLSv1/TLSv1.1. "This applies to all HTTPS connections, including web, API, and Git connections to https://github.com and https://api.github.com."
  • diffie-hellman-group1-sha1. "This applies to all SSH connections to github.com."
  • diffie-hellman-group14-sha1. "This applies to all SSH connections to github.com."

3 of 50 comments (clear)

  1. Re:What's an emoji? by ArchieBunker · · Score: 2

    Yeah emoji support is my number one requirement when looking at software repositories.

    --
    Only the State obtains its revenue by coercion. - Murray Rothbard
  2. Collaboration by raymorris · · Score: 2

    As an AC said, the big benefit to GitHub is collaboration.
    Heck even if you don't have other developers, sometimes *users* can benefit from seeing changes, such as when deciding whether or not to install a new version, or if a recent change might explain some odd behavior they are seeing.

    When there is more than one developer, GitHub largely provides the best of both worlds between centralized and de-centralized development. In Git, each clone of the repo is complete and you can work completely offline. There is no "master server" you have to use. I could pull code onto my laptop from your laptop. On the other hand, because your laptop may be offline at any given time, it's convenient to have the GitHub copy as a de-facto sharing point where everyone pushes code to and everyone can pull from at any time.

    GitHub also provides various minor interface functions that make the workflow smoother. You can use Git without GitHub, but GitHub makes it more convenient with an easy interface to comment on pull requests, set up policy regarding if code review is required before merging, etc.

  3. I can only guess based on by raymorris · · Score: 2

    I haven't used Savannah. I see that it supports many different types of version control. That may be good if you use many types, but if you have chosen Git, it would be reasonable to expect that a Git-focused system, by far the most popular and best-funded Git-based system, probably works better with Git than does a "jack of all trades" with less than 1% as much development funding.

    I know Linus at one point chose Bitbucket. Linus isn't stupid, so obviously it's worth considering.