Re: passwords in subversion

On Dec 11, 2004, at 2:46 PM, Ben Collins-Sussman wrote:

> Hey Ben Reser -- do you believe me now?  Rainer is repeating what I've 
> heard over and over:  that despite making a file chmod 700, users 
> still complain about the fact that "everyone who passes" by the screen 
> can read them.  This is why I continue to advocate even *trivial* 
> ciphering like rot13.  I'm tired of hearing this complaint.\

Perhaps an alternative or additional solution is to ship a script - say 
svnpasswd - that can manage the password file like htpasswd does. The 
admin could still open up and see all the passwords this way, but it 
gives a way to manage user passwords without opening up the file and 
having to see all the passwords.

I'm not going to do anything malicious with my users' passwords, and 
they know that. But people being what they are, tend to reuse passwords 
and I'd rather avoid even having to see their passwords if I could.

Jim