Does the Bitbucket server support encryption?

James Malgieri

Our customer is using Bitbucket and is doing pulls of code from Bitbucket to Git and from Git to Bitbucket. Git is on a remote server separate from the Bitbucket server. Are these pulls of code/transmissions from Bitbucket to Git encrypted automatically?

Dave Chevell

What protocol is your customer using?

• If they're pushing and pulling over SSH, then the data transmission is encrypted
• If they're pushing and pulling over HTTPS (meaning that either Bitbucket itself, or – more likely – a reverse proxy/load balancer in front of Bitbucket, is configured for SSL/TLS), then the data transmission is encrypted
• If they're pushing or pulling over plain HTTP, then the data transmission is not encrypted. You shouldn't ever be running HTTP in a production environment, as this has plenty of other security issues

In other words, if you're running in a correctly configured production environment, then both SSH and HTTPS protocols will encrypt data over the network.

Cheers,

Dave