Hi Alfred, That's correct. Our recommendations were to use SSH wherever possible (and originally, most of the target users were presumed to be in pretty locked-down environments), but it was a long-overdue change that needed to be made. From here on out, we're striving to ensure sensitive data is protected better.
Christian -- Christian Hammond - [email protected] Review Board - https://www.reviewboard.org Beanbag, Inc. - https://www.beanbaginc.com -----Original Message----- From: Alfred von Campe <[email protected]> Reply: [email protected] <[email protected]>> Date: February 20, 2015 at 12:14:29 PM To: [email protected] <[email protected]>> Subject: Re: Subversion access via https:// and plaintext passwords > Christian: > > > If you upgrade to the 2.0 releases, all passwords will be encrypted. I know > > it's not trivial, > and maybe we can backport that to a 1.7 release, but as we're about to start > on the 2.5 betas, > we're unlikely to continue making major changes to 1.7 from here on out. > We'll see what > we can do though. > > Thanks for the lightning-quick response. So am I correct in assuming that > prior to ReviewBoard > 2.X everyone stored their passwords in plain text? That is, unless they > accessed their > repos with ssh keys and no password was required. > > Alfred > > > -- > Supercharge your Review Board with Power Pack: > https://www.reviewboard.org/powerpack/ > Want us to host Review Board for you? Check out RBCommons: > https://rbcommons.com/ > Happy user? Let us know! https://www.reviewboard.org/users/ > --- > You received this message because you are subscribed to the Google Groups > "reviewboard" > group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- Supercharge your Review Board with Power Pack: https://www.reviewboard.org/powerpack/ Want us to host Review Board for you? Check out RBCommons: https://rbcommons.com/ Happy user? Let us know! https://www.reviewboard.org/users/ --- You received this message because you are subscribed to the Google Groups "reviewboard" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
