Garrett Rooney wrote:
> On 7/3/06, Nico Kadel-Garcia <nkadel@comcast.net> wrote:
>> Ulrich Eckhardt wrote:
>>
>>> - svnserve is dead easy to setup and offers some basic
>>> authentication.
>>
>> As much as I like Subversion, I consider svnserve one of its great
>> flaws. Svnserve does not allow storage of encrypted passwords, only
>> plaintext, and relies on plaintext transmission of those passwords.
>
> Uhh, that's pure bullshit, the transmission of the passwords is via
> CRAM-MD5, it is never sent over the wire as plaintext. Please
> investigate these things before you form an opinion. The storage of
> passwords is plainext, but their transmission is not.
Is it? Good! But it's still plain-text storage, and that's still
unforgivable.
---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Jul 4 00:42:14 2006