[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Password in plain text

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: Wed, 14 Mar 2012 16:22:17 +0100

On Wed, Mar 14, 2012 at 12:36, Oto BREZINA <otik_at_printflow.eu> wrote:
> On 2012-03-14 11:18, Andreas Mular wrote:
>> Hi,
>>
>> I'm not sure if it is a bug or a feature. But after scanning my registry I found my ADS password and username in plaintext in the registry under
>> HKEY_USERS\<ID>\Software\TortoiseSVN\Servers\global. I use the version 1.7.3 Build 22386 for 64 bit systems
> There is no Servers key in my 32 bit version. Do you run svn server o
> that machine ? Try to delete that Key and/or Value and see what happen.
>>
>> I think it should be avoid to save a password in plain text every time.
> Shouldn't. May come from some old version, or it is fresh install?

TSVN does not save passwords in the registry. And definitely not in
Software\TortoiseSVN\...

You can however save some data under
HKCU or HKLM\Software\tigris.org\Subversion\config
since that's the registry part of the svn config - the same as you can
do in the config file you can also do in that registry key.

But as I said: TSVN never, ever stores a password in the registry.

Stefan

-- 
       ___
  oo  // \\      "De Chelonian Mobile"
 (_,\/ \_/ \     TortoiseSVN
   \ \_/_\_/>    The coolest Interface to (Sub)Version Control
   /_/   \_\     http://tortoisesvn.net
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=757&dsMessageId=2935633
To unsubscribe from this discussion, e-mail: [dev-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2012-03-14 18:18:06 CET

This is an archived mail posted to the TortoiseSVN Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.