[Top][All Lists]
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: CVS security audit?
|
From: |
Larry Jones |
|
Subject: |
Re: CVS security audit? |
|
Date: |
Fri, 19 Dec 2003 21:00:46 -0500 (EST) |
Eric Siegerman writes:
>
> Now, I seem to recall that one of the big objections to pserver
> is that CVS "has never had a security audit". Once the Savannah
> audit is finished, that objection goes away. How will that
> affect peoples' level of confidence in pserver and the like?
The objection is that CVS was never *designed*, or even *intended*, to
be secure. An audit will affect my confidence not one whit -- it's
sufficient to keep honest people honest, nothing more.
-Larry Jones
Like I'm going to get any sleep NOW. -- Calvin