On Mon, Dec 12, 2011 at 11:44 PM, Nico Kadel-Garcia <nka...@gmail.com> wrote:
>
> I profoundly dislike the Apache/SVN setup, and have said so before.
> This is partly because it's another layer of access control complexity
> that is orthogonal to the pre-commit or other built-in access
> configuration. The other, and more powerful reason, is that Linux and
> UNIX clients for Subversion store the passwords, by default, as
> plain-text in a well-known location in your home directory.
[...]
> So wherever feasible, I use svn+ssh.


If I have access to your home directory to see your saved password,
wouldn't I also be able to copy your ssh identity just as easily?

-- 
  Les Mikesell
    lesmikes...@gmail.com'

Reply via email to