[EMAIL PROTECTED] on 2000.08.09 03:37:01
>In other words, why was pserver invented?  Because *CVS clients did not
>wish to implement the rsh protocol?  Or because the rsh protocol was usually
>blocked by various firewalls?  Wow, so we (or someone) implemented one of
>the worst protocols *ever* in existance instead?  (Authorization and
>integrity wise...)  Now somebody wishes to "fix" this by doing a nserver
>implementation?  Unless this implementation includes some form of *real*
>authentication and integrity of the connection, I fail to see how it will
>be "better" than crappy old pserver...  It will be redundant.

>From (the little of) what I understand of nserver, it separates out the
authentication from CVS.  This has a couple of consequences:
1. pserver can be easily ripped out (if it hasn't already).
2. pluggable (ie real) authentication is possible.


>I'd love to get one question answered by the *CVS (WinCVS, etc) folks.
>Why is SSH (or SRP, etc) support not built into the core functionality
>of your systems, should your platform/system not give native support?

No authentication should exist within CVS.  Instead, CVS should be open to
pluggable authentication.

Noel



This communication is for informational purposes only.  It is not intended as
an offer or solicitation for the purchase or sale of any financial instrument
or as an official confirmation of any transaction. All market prices, data
and other information are not warranted as to completeness or accuracy and
are subject to change without notice. Any comments or statements made herein
do not necessarily reflect those of J.P. Morgan & Co. Incorporated, its
subsidiaries and affiliates.

Reply via email to