If I push to Bitbucket like this:
C:\My Projects\repo>hg push https://user:passd@bitbucket.org/user/repo/
pushing to https://user:***@bitbucket.org/user/repo/
searching for changes
no changes found
The first line is what I type:
C:\My Projects\repo>hg push https://user:pass@bitbucket.org/user/repo/
But the message from Mercurial hides the typed password:
pushing to https://user:***@bitbucket.org/user/repo/
Does that mean my password is encrypted before it goes out over the public WiFi connection and is therefore safe?
If it uses SSL then it should be encrypted before password is sent. Whether mercurial uses it or not is specified in mercurial web server configuration.
Link