[jira] [Assigned] (SVN-4145) Master passphrase and encrypted credentials cache

"C. Michael Pilato (Jira)" <[email protected]>
Newsgroups gmane.comp.version-control.subversion.issues
Message-ID <[email protected]>
     [ https://issues.apache.org/jira/browse/SVN-4145?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

C. Michael Pilato reassigned SVN-4145:
--------------------------------------

    Assignee:     (was: C. Michael Pilato)

> Master passphrase and encrypted credentials cache
> -------------------------------------------------
>
>                 Key: SVN-4145
>                 URL: https://issues.apache.org/jira/browse/SVN-4145
>             Project: Subversion
>          Issue Type: New Feature
>          Components: libsvn_subr
>    Affects Versions: 1.7.x
>            Reporter: C. Michael Pilato
>            Priority: Critical
>             Fix For: 1.10-consider
>
>
> {noformat:nopanel=true}
> Like all popular web browsers, Mozilla Firefox allows you to optionally cache
> passwords used for site logins. Site credentials are cached on disk, and in
> plaintext by default. However, Firefox allows you to optionally configure a
> "Master Password". This password (or passphrase) is used to encrypt the on-disk
> cached site credentials, functioning effectively the same way that a keyring
> provider and associated passphrase would work. Firefox will challenge the user
> for the master password the first time it needs to consult its credentials
> cache, and will leave the cache "unlocked" for the duration of the application's
> lifetime.
> Subversion should be able to do something similar, allowing users to optionally
> employ a master passphrase which is used to encrypt and decrypt other sensitive
> information stored in its authentication credential cache(s).
> See http://wiki.apache.org/subversion/MasterPassphrase for design thoughts.
> {noformat}
> http://wiki.apache.org/subversion/MasterPassphrase



--
This message was sent by Atlassian Jira
(v8.3.4#803005)
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.