This is much better than keeping your credentials in the .git-credentials file where your password is visible in plain text.xxiaoxxiao 12911 silver badge22 bronze badges 1 Even if SNI is not supported, an intermediary capable of intercepting HTTP connections will often be capable of monitoring DNS questions too (most interception is done near the c