Re: Are http-based password authentications secure?

On 4/24/06, Matt England <mengland@mengland.net> wrote:
> Are authentication passwords given to update a repo that is checked out via
> "http://" vs "https://" secure, in the sense that their transmission is
> encrypted?

It depends on how you set up apache. If you use basic auth no, you
need https to encrypt them, if you use digest auth, then yes, they are
encrypted on the wire.

-garrett

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Apr 25 00:29:45 2006