[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Is the svn:// protocol secure when encrypted via SASL?

From: Greg Hudson <ghudson_at_MIT.EDU>
Date: Mon, 21 Feb 2011 15:03:38 -0500

On Mon, 2011-02-21 at 14:48 -0500, Keith Palmer Jr. wrote:
> Nothing in what you just copy-pasted indicates whether it's *the
> actual data stream* that's being encrypted, or just the
> *authentication*. I need to know if the checked-out files that are
> being transferred are encrypted or not.

The SASL "security layer" refers to protection of the actual data
stream. "Encryption of the authentication" isn't really a meaningful
concept in SASL parlance; mechanisms always perform authentication steps
as securely as they are able.
Received on 2011-02-21 21:04:18 CET

This is an archived mail posted to the Subversion Dev mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.