Re: [Monotone-devel] netsync transport encryption?

[Timothy Brownawell]

On Tue, 2006-10-24 at 14:50 -0400, Cem Karan wrote:
> Hi all, I've been asked by my boss to evaluate various SCM options to  
> see what fits our needs best.  I found Monotone via the Better SCM  
> Initiative (http://better-scm.berlios.de/comparison/), and it looks  
> like it fits our needs quite well.  I saw that a LOT of work has been  
> done in authentication, something that hasn't been done in many of  
> the other SCM systems I've seen.  I also saw on the mailing list  
> archives from October of 2005 a really long discussion on how to  
> implement transport layer encryption as well as authentication in  
> Monotone, but no conclusions.  I didn't see anything more recent than  
> that, and I was wondering if Monotone was going to natively support  
> encryption as well as authentication (not in the mailing list  
> archives, nor in the 0.30 source files).  

It doesn't currently, and it's not something we have plans to do (that
I'm aware of, at least). I'm also not aware of any decisions of "no we
will not do that ever".

IIRC part of the problem is that (many/most) ssl libraries supposedly
tend to not get along well with async sockets, and then there's also the
"just use vpn or a LD_PRELOADed encryption library" argument. So it'd
probably be more of a pain to implement (and maintain) than to use
external tools to provide.

-- 
Timothy

Free (experimental) public monotone hosting: http://mtn-host.prjek.net