Re: Subversion authentication security issue (svnserve, MITM)

2015-01-17 Thread Daniel Shahaf
Stefan Sperling wrote on Fri, Jan 16, 2015 at 11:03:17 +0100: > On Fri, Jan 16, 2015 at 10:35:46AM +0300, Navrotskiy Artem wrote: > > Configuration svnserver + ssh even in local network adds more overhead to > > establish the connection (I have 0.3 seconds per connection). Console svn > > client

Re: Subversion authentication security issue (svnserve, MITM)

2015-01-16 Thread Stefan Sperling
On Fri, Jan 16, 2015 at 10:35:46AM +0300, Navrotskiy Artem wrote: > Hello. > > Subversion includes many types of connection: > > * svnserve - plain password over network > * svnserve + ssh - secure, but unusable slow > * http - plain password over network > * https - secure > > In the case o

Subversion authentication security issue (svnserve, MITM)

2015-01-15 Thread Navrotskiy Artem
Hello. Subversion includes many types of connection: * svnserve - plain password over network * svnserve + ssh - secure, but unusable slow * http - plain password over network * https - secure In the case of svnserver default instead of the password hash is transmitted over the network, and