Does the Bitbucket server support encryption?

[James Malgieri]

Our customer is using Bitbucket and is doing pulls of code from Bitbucket to Git and from Git to Bitbucket. Git is on a remote server separate from the Bitbucket server. Are these pulls of code/transmissions from Bitbucket to Git encrypted automatically?

[Dave Chevell · Accepted solution]

What protocol is your customer using?

• If they're pushing and pulling over SSH, then the data transmission is encrypted
• If they're pushing and pulling over HTTPS (meaning that either Bitbucket itself, or – more likely – a reverse proxy/load balancer in front of Bitbucket, is configured for SSL/TLS), then the data transmission is encrypted
• If they're pushing or pulling over plain HTTP, then the data transmission is not encrypted. You shouldn't ever be running HTTP in a production environment, as this has plenty of other security issues

In other words, if you're running in a correctly configured production environment, then both SSH and HTTPS protocols will encrypt data over the network.

Cheers,

Dave

[James Malgieri]

Dave,

Thank you for your reply.

Jim