[cvsnt] Re: "require encryption" vs "require auth"

[andy]

does "require encryption" imply "require authentication"?


"Tony Hoyle" <tmh at nodomain.org> wrote in message
news:bgbqrh$vja$2 at sisko.local.nodomain.org...
> andy wrote:
>
> > in cvsnt control panel applet whats the diff on the encryption combo
> > between "require encryption" and "require auth"?
>
> 'Require auth' just authenticates the packet (the -a switch to the cvs
> client) to make sure they haven't been tampered with in transit - it stops
> certain kinds of active attack without actually encrypting the data.
>
> Tony
>