Re: Logging of subrequest authorization checks in mod_dav_svn/mod_authz_svn

2015-01-17 Thread Daniel Shahaf
Ben Reser wrote on Fri, Jan 16, 2015 at 14:09:45 -0800: > On 1/16/15 11:52 AM, C. Michael Pilato wrote: > > As for log levels, is there any reason to log the implicit read attempts > > at a level higher than "debug"? I have no opinion about the log level > > for the explicit ones. > > I can see s

Re: Subversion authentication security issue (svnserve, MITM)

2015-01-17 Thread Daniel Shahaf
Stefan Sperling wrote on Fri, Jan 16, 2015 at 11:03:17 +0100: > On Fri, Jan 16, 2015 at 10:35:46AM +0300, Navrotskiy Artem wrote: > > Configuration svnserver + ssh even in local network adds more overhead to > > establish the connection (I have 0.3 seconds per connection). Console svn > > client