[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Monotone-devel] passphrase option
From: |
Richard Levitte - VMS Whacker |
Subject: |
Re: [Monotone-devel] passphrase option |
Date: |
Thu, 12 Aug 2004 12:09:02 +0200 (CEST) |
In message <address@hidden> on Thu, 12 Aug 2004 11:11:34 +0200, Jon Bright
<address@hidden> said:
jon> wrt. the LUA passphrase hook, I wouldn't necessarily want to use
jon> it myself, but I don't think of it as a risk per se. Even if
jon> ssh-agent (or similar) support were added, I think there's a fair
jon> argument for leaving the hook there.
Oh, absolutely. I'm not saying the hook should be removed, it
definitely has a value, for example to store the password for a server
key (yeah, I know, it makes one cringe, but what can you do, eh?).
However, I want to stress that passwords in files should be used with
causion, and that alternatives should be used if available.
-----
Please consider sponsoring my work on free software.
See http://www.free.lp.se/sponsoring.html for details.
--
Richard Levitte address@hidden
http://richard.levitte.org/