Re: [Savannah-hackers] GNATS host?

[Loic Dachary]

 > 
 > I am not sure to get what you mean. The login stuff is encrypted by the
 > MySQL client library. But I am not sure that the transmission itself is
 > encrypted. I don't know if it matters for this kind of information.
 > Indeed using the Mailman web interface, you send the same info in clear
 > text.

 I mean that transfering username/passwd within a request from subversions
to fencepost will transfer them in clear (passwd are crypted but a dict cracker
could probably find some). If you run a ssh tunel on fencepost that go
to the mysql port on subversions you don't have the problem.

   Cheers,

-- 
Loic   Dachary         http://www.dachary.org/  address@hidden
24 av Secretan         http://www.senga.org/      address@hidden
75019    Paris         Tel: 33 1 42 45 09 16        address@hidden
        GPG Public Key: http://www.dachary.org/loic/gpg.txt