[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

RE: svnserve password store in clear text

From: Ng, Wey Han <weyhan.ng_at_atosorigin.com>
Date: 2004-06-03 06:08:53 CEST

> -----Original Message-----
> From: Eric Hanchrow [mailto:offby1@blarg.net]
> Sent: Thursday, June 03, 2004 12:52 AM
>
> Coincidentally I was wondering about this same thing yesterday. I've
> since realized that the clear-text passwords are protected by the same
> mechanism that protects your repository itself, namely, the file
> system. If you're worried that that protection isn't sufficient for
> your passwords, you shouldn't use it for your repository data, either
> :-|

Security is not a problem but integrity is a problem. I don't want to be
reading users password and now I have to go through great length to avoid
that.

Regards,

Han.

----
Ng, Wey-Han
Atos Origin
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Thu Jun 3 16:21:51 2004

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.