Re: Security flaw: subversion stores passwords by default

Paul Koning <Paul_Koning_at_dell.com> writes:
> So... it would certainly be possible for Subversion to have an
> analogous scheme, where you run a tool (it might even be the standard
> client) with a command that says "go into the background and be a
> credentials agent for the client". That gives you the convenience of
> svn+ssh with ssh-agent, without the need to set up SSH based access
> control, and without plaintext on-disk passwords.

Yes, it's been discussed for years (search for "svn-agent"), but no one
has implemented it.

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe_at_subversion.tigris.org
For additional commands, e-mail: users-help_at_subversion.tigris.org
Received on 2008-03-20 15:58:35 CET