Re: Rsync: Re: password prompts

[Mark W. Eichin]

> >As for implementing ssh inside of rsync, I'd like to continue to reiterate
> >what a bad idea I think that is. Security is enough pain without worrying

Indeed, the biggest reason to use an external ssh program is that it
makes security updates *someone else's* problem -- ideally someone who
cares and/or is good at it.  ("Put all your eggs in one basket and
*watch that basket*" :-) Seriously, when an ssh bug comes up (and more
will - it's written in C after all) we don't need the additional
leverage provided *to the attacker* of having to fix related attacks
in N different programs - we just have to fix ssh itself.  Yay
abstraction.