> Storing your password in plain text in your settings.xml file is sometimes
> (always?) bad practice.  In that case you should look into encrypting the
> passwords that are contained therein.  (See

I personally disagree with this if you are using a reasonable
filesystem with reasonable security norms. This would mean your home
dir is not world-readable etc if you are on a multi-user system so no
one should be able to find their way to your ~/.m2/ directory and be
able to look at your settings.xml file in the first place.

I don't believe the extra work of encrypting those strings is worth a
whole lot. It is simply security theatre.

Wayne

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to