Re: RFC: Encrypting ~/.subversion/auth on Windows

On Saturday 13 November 2004 02.03, Ben Collins-Sussman wrote:
> On Nov 12, 2004, at 6:31 PM, Sigfred Håversen wrote:
> > Slightly offtopic, why not encrypt the passwords for svnserve?
>
> IIRC, because of the way the CRAM-MD5 algorithm works, the server needs
> access to the actual password, not a hashed version of it.

IIRC, httpd has hashed user passwords even for CRAM-MD5, but I'll have to
check the documentation for this. My use of passwords for httpd goes over
https, except for LAN (yeah I know thats bad, but Visual SourceSafe is even
worse, and I've had to "sell" Subversion to my bosses last autumn....)

/Sigfred

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@subversion.tigris.org
For additional commands, e-mail: dev-help@subversion.tigris.org
Received on Sat Nov 13 02:21:13 2004