[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: Configuration recommendations in a heterogenous Linux environment?

From: Nico Kadel-Garcia <nkadel_at_comcast.net>
Date: 2006-07-04 00:40:57 CEST

Garrett Rooney wrote:
> On 7/3/06, Nico Kadel-Garcia <nkadel@comcast.net> wrote:
>> Ulrich Eckhardt wrote:
>>
>>> - svnserve is dead easy to setup and offers some basic
>>> authentication.
>>
>> As much as I like Subversion, I consider svnserve one of its great
>> flaws. Svnserve does not allow storage of encrypted passwords, only
>> plaintext, and relies on plaintext transmission of those passwords.
>
> Uhh, that's pure bullshit, the transmission of the passwords is via
> CRAM-MD5, it is never sent over the wire as plaintext. Please
> investigate these things before you form an opinion. The storage of
> passwords is plainext, but their transmission is not.

Is it? Good! But it's still plain-text storage, and that's still
unforgivable.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@subversion.tigris.org
For additional commands, e-mail: users-help@subversion.tigris.org
Received on Tue Jul 4 00:42:14 2006

This is an archived mail posted to the Subversion Users mailing list.