[svn.haxx.se] · SVN Dev · SVN Users · SVN Org · TSVN Dev · TSVN Users · Subclipse Dev · Subclipse Users · this month's index

Re: svn Farm

From: Les Mikesell <lesmikesell_at_gmail.com>
Date: Sat, 09 Oct 2010 10:06:37 -0500

On 10/9/10 8:39 AM, Nico Kadel-Garcia wrote:
> Look, Subversion inherited its practice of storing password in
> cleartext from its ancestor, CVS. It's been an uphill battle ever
> since to wallpaper over the practice: there are enough layers of
> wallpaper, finally, that it's almost thick enough to be a wall. It's
> fixed for TortoieSVN, and svn+ssh using SSH keys can work well.

If you are going to rant, you should also point out that ssh keys without a
passphrase and agent to manage it are not really any different than a
file-stored password. If you can copy the private side of the identity key, you
can get access.

   Les Mikesell
Received on 2010-10-09 17:07:20 CEST

This is an archived mail posted to the Subversion Users mailing list.