[Monotone-devel] How secure are group names?

[Peter Simons]

Is it secure to to put private data into a publicly
available CGI depot, as long as I'm using a secret group
name?

Or put differently: Is it possible in a regular way, that an
anonymous user downloads the whole depot.db? 

Peter


P. S.: And is there any way to display which files in a
check-out repository are tracked by monotone and which
aren't? "list unknown" doesn't seem to do anything.