RE: Repository Passwords are in clear text?

> This is an FAQ, addressed here:
> http://subversion.tigris.org/faq.html#plaintext-passwords

I think he's talking about the repository passwords that are used when
accessing the repository using svnserve (in repo/conf/passwd), not the
SVN client password cache that the FAQ talks about.

> I agree with you that the CVS-like lightweight password
> hiding would be nice, but I haven't got around to submitting
> a patch...

I think it would be better to not store passwords, but only their
hashes, just like Apache does. Maybe a htpasswd-like tool should be
added to svnserve?

Greetz,

Leon Zandman

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Nov 11 17:17:00 2005