[cvsnt] Re: CVSNT + Web Application Implementation

Tony Hoyle tony.hoyle at march-hare.com
Sun Feb 5 22:49:23 GMT 2006


Bo Berglund wrote:
> Contrast this to using :<protocol>:user:password at server:/Repo where
> the entire string will be stored in *all* Root files inside the CVS
> subdirectories in the entire checked out sandbox tree! It is there for
> *anyone* to read even without the least trace of encryption! You only
> need to be able to open the Root file in an editor like notepad and
> you have the password!!!
> 

2.5.03 doesn't do this btw.  it logs you in and scrubs the password from 
the root string.

Tony



More information about the cvsnt mailing list