Vulnerability disclosure: Radicle nodes send private repositories in cleartext

“Everything the two nodes say to each other goes over the plain TCP socket unencrypted: gossip, repository ids, the addresses of other nodes, and the Git objects themselves, private repositories included. (…) Anyone on the network path between two nodes (an ISP, a transit provider, a relay) can read all of it.”

Ouch.