Re: Credentials Caching - Security Guy Not Happy

Travis P <svn@castle.fastmail.fm> writes:
> It can lead to something entirely sensible like ssh-agent or AFS tokens.
> The key is then cached in memory only (locked, non-pageable memory if
> the OS allows for that).

Yes -- we've talked about doing that, it's just that it's a
non-trivial project.

You could conceivably implement it as a wrapper around the 'svn'
client, one that communicates with its own agent and passes the
--username and --password options to svn every time.

> A system like this is more complicated, but would have significant
> advantages over what is currently available.

No one disagrees, it's just a question of priorities.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Thu Aug 26 00:31:47 2004