Tres Seaver schrieb:
> Chris Withers wrote:

>>>Where should I write the proposal? Who is going to review it?
> ; post here and zope3-dev
> for review.

+1 for http anon checkouts at least :-)
> -1 on using https for writable checkouts.
> The issues aren't so much technical feasibility as social / legal:  a
> checkin done using somebody's private key is way less deniable than one
> done with a password.  Unless you plan to set up a system for issuing
> client certificates to contributors, I don't think https is superior to
> svn+ssh at all.

I think a possible solution would be client certificate on request
and downloadable with ssh from users account - maybe even automatically
generation of client cert via ssh for acredited contributors.

At least this would be equaly secure/insecure as current ssh-pubkey

Otoh, if you want to make it right [tm] you need a fairly complicated
CA-setup. Including isolated box, sneakers-net or at least some solution
with serial interface... really a lot of work. (But this would
be more secure then we have now with the simple publickey)

Zope-Dev maillist  -
**  No cross posts or HTML encoding!  **
(Related lists - )

Reply via email to