[cvsnt] Re: CVSNT + Web Application Implementation

Bo Berglund bo.berglund at telia.com
Sun Feb 5 23:03:45 GMT 2006


On Sun, 05 Feb 2006 22:49:23 +0000, Tony Hoyle
<tony.hoyle at march-hare.com> wrote:

>Bo Berglund wrote:
>> Contrast this to using :<protocol>:user:password at server:/Repo where
>> the entire string will be stored in *all* Root files inside the CVS
>> subdirectories in the entire checked out sandbox tree! It is there for
>> *anyone* to read even without the least trace of encryption! You only
>> need to be able to open the Root file in an editor like notepad and
>> you have the password!!!
>> 
>
>2.5.03 doesn't do this btw.  it logs you in and scrubs the password from 
>the root string.

Which is good news!
But I guess that GNU CVS and Cygwin CVS still do this?


/Bo
(Bo Berglund, developer in Sweden)



More information about the cvsnt mailing list