[cvsnt] Re: sspi vs. ssh ?!?

Ralf Steinhaeusser stralf at gmx.net
Sat Nov 8 14:10:14 GMT 2003


Community technical support mailing list was retired 2010 and replaced with a professional technical support team. For assistance please contact: Pre-sales Technical support via email to sales@march-hare.com.


On Sat, 08 Nov 2003 10:16:15 +0000, Tony Hoyle <tmh at nodomain.org>
wrote:

>SSPI is secure enough provided the clients are all NT/2000/XP and you
>switch encryption on.  

Great! This is good news!
I use TortoiseCVS and on I checkout I see

In F:\Temp\CVS_Test: cvs -q -x update -d -P
CVSROOT=:sspi:w2kwg:/Test

-x indicates encryption, right?

>If you're really paranoid you can use sserver which is a pserver
>session encrypted in an SSL tunnel - pretty unbreakable unless the
>client machine is compromised.

Is this easy to achieve? If not I'll trust you (saying sspi is secure)
and stay with sspi :-)

However, I have 2 questions left:

1.) Is there a way to use sspi with a "keyfile" or something similar
instead of the login-password?
(Our LAN-computers are behind a firewall, so our login-passwords tend
to be dumb and short and I guess this makes them easy to crack)

2.) I have to move the CVS-files (and program) from one computer to
another. So the computername will change. Is there a smart way to
change all the entries in the CVS/Root - files on our computers?

Thanks a lot,
Ralf


More information about the cvsnt mailing list
Download the latest CVSNT, TortosieCVS, WinCVS etc. for Windows 8 etc.
@CVSNT on Twitter   CVSNT on Facebook