Re: Versioning system

From: Kasper Dupont (wfbtxutyalwrmiandynpenajcf_at_skrammel.yaboo.dk)
Date: 06/05/04 

Date: Sat, 05 Jun 2004 15:27:09 +0200

Christopher Browne wrote:
>
> In the context of the O.P.'s notion of security, Bitkeeper would, much
> like _all_ other options, be ruled out due to its use of SSH for
> secure communications.

Actually I doubt you'd come up with anything much more
secure anyway. I wouldn't expect as much focus on the
security of a protocol used for just a single source
control system as with SSH which some people use for more
or less everything.

In many cases it is very convenient to just have the SSH
server runing which you can use for whatever you need to
do over the network, and still have only one server to
worry about.

As for alternatives that allow you to send user names and
passwords encrypted, only thing that comes to my mind is
https. Might be an option if you think that is more secure.
But then all the OpenSSL problems might actually affect
you. Also the key management with ssh and https are
different. So if one fits your needs and the other don't
that might be what you should base your choice upon. 

-- 
Kasper Dupont -- der bruger for meget tid paa usenet.
For sending spam use kasperd@kd.lir.dk and abuse@kd.lir.dk
I'd rather be a hammer than a nail.

Relevant Pages

  • Re: [Full-disclosure] Why Vulnerability Databases cant do everything
    ... best to relegate programming to a ... is a big difference between these two views of information security. ... but not nearly as important as designing secure systems. ... My favorite example to illustrate this point - ssh. ...
    (Bugtraq)
  • Questions on secure remote access to Fedora Core 2
    ... I am somewhat new to Internet security solutions in general and Linux ... I am setting up a server with Fedora Core 2 (there are specific reasons ... What is the most secure method I can use to give these individuals access ... under ssh. ...
    (comp.os.linux.security)
  • Re: Ten least secure programs
    ... it's probably better you leave the topic alone ... I said I do not have security issues with the programs I code. ... I didn't realize you were a Linux user, ... > the most widely used and secure UNIX flavors? ...
    (Security-Basics)
  • "An Asp.Net accident waiting to happen" - Draft article
    ... In a time where Security ... in shared hosting environments. ... technologies that allow the creation and deployment of secure ... IIS 6 web server and windows 2003 also provide some tools to deploy ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • RE: Why Easy To Use Software Is Putting You At Risk
    ... I do agree that the additions and changes to Solarius will make it more secure and that this is good. ... Why Easy To Use Software Is Putting You At Risk ... instead I would say that the view that security is ... Four Construction Workers Died after Crane Collapse in Toledo, ...
    (Security-Basics)