Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-21 Thread Philip Martin
Keith Palmer Jr. ke...@consolibyte.com writes: So there's no one out there that knows whether SASL encrypts the data stream, or just the authentication (or which SASL modules encrypt the data, and which don't)? That depends on how you have configured your repository via svnserve.conf: [sasl]

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-21 Thread Keith Palmer Jr.
Nothing in what you just copy-pasted indicates whether it's *the actual data stream* that's being encrypted, or just the *authentication*. I need to know if the checked-out files that are being transferred are encrypted or not. --- - Keith Palmer ConsoliBYTE, LLC Ask for a quote! -

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-21 Thread Philip Martin
Keith Palmer Jr. ke...@consolibyte.com writes: Nothing in what you just copy-pasted indicates whether it's *the actual data stream* that's being encrypted, or just the *authentication*. I need to know if the checked-out files that are being transferred are encrypted or not. SASL provides

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-21 Thread Greg Hudson
On Mon, 2011-02-21 at 14:48 -0500, Keith Palmer Jr. wrote: Nothing in what you just copy-pasted indicates whether it's *the actual data stream* that's being encrypted, or just the *authentication*. I need to know if the checked-out files that are being transferred are encrypted or not. The

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-21 Thread Stefan Sperling
On Mon, Feb 21, 2011 at 02:48:49PM -0500, Keith Palmer Jr. wrote: Nothing in what you just copy-pasted indicates whether it's *the actual data stream* that's being encrypted, or just the *authentication*. I need to know if the checked-out files that are being transferred are encrypted or

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-21 Thread Keith Palmer Jr.
Thanks. --- - Keith Palmer ConsoliBYTE, LLC Ask for a quote! - QuickBooks Integration and Software Development ke...@consolibyte.com 1-860-341-1464 http://www.ConsoliBYTE.com/ Follow us on Twitter at: https://twitter.com/consolibyte AIM: consolibyte MSN:

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-16 Thread Julian Foad
On Wed, 2011-02-16, Daniel Shahaf wrote: Keith Palmer Jr. wrote on Tue, Feb 15, 2011 at 16:26:19 -0500: I tried to capture the traffic with Wireshark, but it appears that everything is compressed over the wire anyway... so I can't tell if I'm looking at just compressed data, or

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-16 Thread Daniel Shahaf
No, I didn't mean it to sound harsh. I assumed that, having already captured the data in wireshark, it would be straightforward to get wireshark to decompress it or dump it to a file. Thanks for jumping in and correcting me. Daniel Julian Foad wrote on Wed, Feb 16, 2011 at 12:58:22 +: On

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-16 Thread Keith Palmer Jr.
If there's an easy way to decompress it, I certainly don't know it. Wireshark just gives me a pile of packets- I don't know what algorithm was used to compress the data, or even where the compressed data starts and ends. Is there any documentation anywhere as to which SASL modules encrypt the

Is the svn:// protocol secure when encrypted via SASL?

2011-02-15 Thread Keith Palmer Jr.
We'd like to use the svn:// protocol to check out some code over a WAN, but we want to make sure that the code isn't traveling over the WAN in plain-text. If we set up the repo to require min-compression 128 via SASL, does that encrypt *just the authentication* or does that *encrypt the

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-15 Thread Mark Phippard
On Tue, Feb 15, 2011 at 4:11 PM, Keith Palmer Jr. ke...@consolibyte.com wrote: We'd like to use the svn:// protocol to check out some code over a WAN, but we want to make sure that the code isn't traveling over the WAN in plain-text. If we set up the repo to require min-compression 128 via

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-15 Thread Daniel Shahaf
Keith Palmer Jr. wrote on Tue, Feb 15, 2011 at 16:26:19 -0500: I tried to capture the traffic with Wireshark, but it appears that everything is compressed over the wire anyway... so I can't tell if I'm looking at just compressed data, or compressed+encrypted data. Decompress it then?

Re: Is the svn:// protocol secure when encrypted via SASL?

2011-02-15 Thread Daniel Shahaf
Keith Palmer Jr. wrote on Tue, Feb 15, 2011 at 16:11:48 -0500: I've asked just about everywhere else and can't seem to get a straight answer out of anyone- some people say yes, some people say no. Mark's advice said, I think the correct answer is it depends on the SASL module being used ---