[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Repository Passwords are in clear text?

From: Paul Koning <pkoning_at_equallogic.com>
Date: 2005-11-11 23:35:49 CET

>>>>> "Noel" == Noel Yap <noel.yap@gmail.com> writes:

 Noel> On 11/11/05, Paul Koning <pkoning@equallogic.com> wrote:
>> There are ways to avoid that, as in SRP for example. Then again,
>> there are patent issues that make that problematic for GPL code...

 Noel> It doesn't seem that way from SRP's README file:

 Noel> The SRP project originated at Stanford University and was
 Noel> originally developed as a joint effort between Tom Wu and
 Noel> Eugene Jhong. The distribution has grown into a fully-fledged
 Noel> Open Source project which is being maintained with the help of
 Noel> volunteers from around the world via the Internet, and it is
 Noel> free for commercial and non-commercial use, as long as the
 Noel> copyrights are included and appropriate credit is given (see
 Noel> docs/LICENSE for details).

In the IETF IP Storage working group, SRP was proposed as an
authentication mechanism. Tom Wu and others pushed for it, and Tom
gave the Stanford patent position (which was certainly a very
agreeable one).

Unfortunately, Lucent also made noises that it had patents that cover
SRP. At one time it committed to give a definite yes or no answer as
to whether that really was the case. In the end, Lucent did not do
that, so the question remained up in the air. As a result, SRP,
though mentioned in the iSCSI standard, has not actually been adopted
in the real world.

   paul

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Fri Nov 11 23:38:02 2005

This is an archived mail posted to the Subversion Users mailing list.

This site is subject to the Apache Privacy Policy and the Apache Public Forum Archive Policy.