RE: Linux security issues as they pertain to CVS

[Thornley, David]

> -----Original Message-----
> From: address@hidden [mailto:address@hidden
> Sent: Friday, May 25, 2001 7:48 PM
> To: Mark
> Cc: CVS Mailing List
> Subject: Re: Linux security issues as they pertain to CVS
> 
> 
> The problem is that pserver cannot be made secure.  Literally cannot.
> It runs on a raw, insecure TCP circuit and is subject to all kinds of
> man-in-the-middle attacks, connection hijacking, spoofing, etc.
> 
Any problems with running pserver over an encrypted channel?  It seems to
met that would be just as secure as ssh access (and, of course, just as
unsafe - the biggest potential security problems being the guys on both
ends of the channel).