Re: Passwords are saved as clear text in Windows registry

-------- Original-Nachricht --------
> Datum: Fri, 12 Jun 2009 18:52:05 -0700 (PDT)
> Von: Greywolf <greywolf_at_starwolf.com>
> An: users_at_tortoisesvn.tigris.org
> Betreff: Re: Passwords are saved as clear text in Windows registry

> [Thus spake Stefan Küng ("SK: ") 7:35pm...]
>
> SK: Seriously? You've set up your computer to allow remote registry
> access?
TortoiseSVN 1.6.2, Build 16344 - 32 Bit , 2009/05/09 13:46:29
exposes passwords as clear text in the registry.

In companies typical users are not administrators of their laptops.
Administrators often setup remote registry access to monitor
software installed or they use remote logon.

Users are not allowed to expose passwords to administrators. This
results in TortoiseSVN being a non compliant software.

Please, change TortoiseSVN to ask for the proxy password interactively.

The password should be requested via a dialog
- on first access of the proxy after starting TortoiseSVN
- on refusal of a password by the proxy (the password may have
  been changed during the runtime of the program)

Best regards

Carl

-- 
GMX FreeDSL Komplettanschluss mit DSL 6.000 Flatrate und Telefonanschluss
für nur 17,95 Euro/mtl.!* http://portal.gmx.net/de/go/dsl02
------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2362993
To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].