subversion-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Les Mikesell <lesmikes...@gmail.com>
Subject Re: Hypervisor Support - Virtual Guest Image Versioning
Date Tue, 13 Dec 2011 16:35:36 GMT
On Mon, Dec 12, 2011 at 11:44 PM, Nico Kadel-Garcia <nkadel@gmail.com> wrote:
>
> I profoundly dislike the Apache/SVN setup, and have said so before.
> This is partly because it's another layer of access control complexity
> that is orthogonal to the pre-commit or other built-in access
> configuration. The other, and more powerful reason, is that Linux and
> UNIX clients for Subversion store the passwords, by default, as
> plain-text in a well-known location in your home directory.
[...]
> So wherever feasible, I use svn+ssh.


If I have access to your home directory to see your saved password,
wouldn't I also be able to copy your ssh identity just as easily?

-- 
  Les Mikesell
    lesmikesell@gmail.com'

Mime
View raw message