Re: [PATCH] default to --no-auth-cache

Justin Erenkrantz <jerenkrantz@apache.org> writes:
> My point is thus: stop storing the auth in the WC, rather it should be
> somewhere in ~/.subversion/. This fixes this real complaint. The arg
> switches and the rest of this thread is merely trying to workaround
> the real problem. If the auth cache isn't in your WC, I'm not sure
> that the security concerns are as valid.

Yeah. That would be easier to do if we could distinguish between two
different repositories on the same machine.

> Hey, this is a great place for the repository UUID. =) -- justin

True.

How would people feel about solving this security problem by putting
all auth data in ~/.subversion? (And into the registry on Windows?
How secure/maintainable is that?)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Tue Jan 14 03:02:24 2003