[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Registry key ConfigDir doesn't work

From: Stefan Küng <tortoisesvn_at_gmail.com>
Date: Wed, 16 Jul 2008 17:58:31 +0200

Karsonito wrote:
>>> Strange behavior. In such way I can't hide my passwords in safe place
>>> (crypted disk).
>>> So, which task this setting solve? I was expecting simple moving of
>>> config profile.
>> Sure you can.
>> As I said: the custom config file is used and overwrites all settings in
>> the original config file. But the original is still used.
>> So: if you want to have your custom config file on an encrypted disk,
>> just do it.
> So I do.
>
>> You don't have to put your passwords in the config file in the original location.
> Nevertheless, TortoiseSVN still can't find passwords (auth/svn.simple)
> moved to safe place.

Well, the setting is for the *config file*, not the authentication data.
I assumed you had some passwords in your config file for you proxy.

> It asks me for password, saving one to default place (security hole).

No, that's not a security hole. You can search the Subversion mailing
list for "passwords" "in plain text" and you will find all the
information you need.

Also, you must be still using Win2k (I'd consider that the bigger
security hole), otherwise you would notice that the auth data is written
encrypted to disk.

Stefan

-- 
        ___
   oo  // \\      "De Chelonian Mobile"
  (_,\/ \_/ \     TortoiseSVN
    \ \_/_\_/>    The coolest Interface to (Sub)Version Control
    /_/   \_\     http://tortoisesvn.net

Received on 2008-07-16 17:58:51 CEST

This is an archived mail posted to the TortoiseSVN Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.