Using SFTP pull on Win32
Robert Collins
robertc at robertcollins.net
Sun Nov 13 19:03:07 GMT 2005
On Fri, 2005-11-11 at 10:24 -0800, Robey Pointer wrote:
> Anyway I mostly just wanted to whine that I'm unsatisfied with the
> way the SFTP transport is directly asking the user for a password.
> It shouldn't be implementing UI.
One of the considerations with code that is dealing with security
sensitive information is to minimise the ability of it to be corrupted.
I can trivially imagine us having password getting facilities in bzr,
and then a plugin hijacking them.
That said, there are good ways to do it, you can use the SSH X interface
for instance, ask-ssh-pass or whatever it is.
Rob
--
GPG key available at: <http://www.robertcollins.net/keys.txt>.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/bazaar/attachments/20051114/7fffa75c/attachment.pgp
More information about the bazaar
mailing list