Hi Alfred,

That's correct. Our recommendations were to use SSH wherever possible (and 
originally, most of the target users were presumed to be in pretty locked-down 
environments), but it was a long-overdue change that needed to be made. From 
here on out, we're striving to ensure sensitive data is protected better.

Christian

--  
Christian Hammond - christ...@beanbaginc.com  
Review Board - https://www.reviewboard.org  
Beanbag, Inc. - https://www.beanbaginc.com

-----Original Message-----
From: Alfred von Campe <alf...@von-campe.com>
Reply: reviewboard@googlegroups.com <reviewboard@googlegroups.com>>
Date: February 20, 2015 at 12:14:29 PM
To: reviewboard@googlegroups.com <reviewboard@googlegroups.com>>
Subject:  Re: Subversion access via https:// and plaintext passwords

> Christian:
>  
> > If you upgrade to the 2.0 releases, all passwords will be encrypted. I know 
> > it's not trivial,  
> and maybe we can backport that to a 1.7 release, but as we're about to start 
> on the 2.5 betas,  
> we're unlikely to continue making major changes to 1.7 from here on out. 
> We'll see what  
> we can do though.
>  
> Thanks for the lightning-quick response. So am I correct in assuming that 
> prior to ReviewBoard  
> 2.X everyone stored their passwords in plain text? That is, unless they 
> accessed their  
> repos with ssh keys and no password was required.
>  
> Alfred
>  
>  
> --
> Supercharge your Review Board with Power Pack: 
> https://www.reviewboard.org/powerpack/  
> Want us to host Review Board for you? Check out RBCommons: 
> https://rbcommons.com/
> Happy user? Let us know! https://www.reviewboard.org/users/
> ---
> You received this message because you are subscribed to the Google Groups 
> "reviewboard"  
> group.
> To unsubscribe from this group and stop receiving emails from it, send an 
> email to reviewboard+unsubscr...@googlegroups.com.  
> For more options, visit https://groups.google.com/d/optout.
>  

-- 
Supercharge your Review Board with Power Pack: 
https://www.reviewboard.org/powerpack/
Want us to host Review Board for you? Check out RBCommons: 
https://rbcommons.com/
Happy user? Let us know! https://www.reviewboard.org/users/
--- 
You received this message because you are subscribed to the Google Groups 
"reviewboard" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to reviewboard+unsubscr...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to