[ On Friday, January 16, 2004 at 12:36:14 (+0100), Claus Henriksen wrote: ]
> Subject: Re: CVS, RSH and direct access to repository
>
> Well, what then if you tunnel pserver like explained in 
> http://wwwhome.cs.utwente.nl/~klaren/index.html?left.html&cvs-stunnel.html ?

Network tunnels in no way change the fact that :pserver: provides
absolutely no security whatsoever, and indeed presents many risks over
and above those that are present with something like RSH (i.e. also
through a tunnel if the RSH connection must pass over an untrusted
network).

DO NOT USE pserver for anything but _anonymous_ (and presumably
read-only) access!

-- 
                                                Greg A. Woods

+1 416 218-0098                  VE3TCP            RoboHack <[EMAIL PROTECTED]>
Planix, Inc. <[EMAIL PROTECTED]>          Secrets of the Weird <[EMAIL PROTECTED]>


_______________________________________________
Info-cvs mailing list
[EMAIL PROTECTED]
http://mail.gnu.org/mailman/listinfo/info-cvs

Reply via email to