I&#x27;m seeking a Git host and CodeCommit is too unruly to configure (auth on the client side doesn&#x27;t play well with NetBeans).<p>Considered Github, but they don&#x27;t encrypt at rest, claiming that doing so wouldn&#x27;t increase security, since an attacker who had root access to the box would also have encryption keys. This seems wildly disingenuous for a number of reasons. But, in general, my thinking is that encryption at rest is always more secure.<p>Do you trust Github&#x27;s security (network and otherwise) and do you buy that at-rest encryption isn&#x27;t more secure?
Ask HN: Do you trust GitHub security?