Using SFTP pull on Win32

Robert Collins robertc at robertcollins.net
Sun Nov 13 19:03:07 GMT 2005


On Fri, 2005-11-11 at 10:24 -0800, Robey Pointer wrote:

> Anyway I mostly just wanted to whine that I'm unsatisfied with the  
> way the SFTP transport is directly asking the user for a password.   
> It shouldn't be implementing UI.

One of the considerations with code that is dealing with security
sensitive information is to minimise the ability of it to be corrupted.
I can trivially imagine us having password getting facilities in bzr,
and then a plugin hijacking them.

That said, there are good ways to do it, you can use the SSH X interface
for instance, ask-ssh-pass or whatever it is.

Rob

-- 
GPG key available at: <http://www.robertcollins.net/keys.txt>.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
Url : https://lists.ubuntu.com/archives/bazaar/attachments/20051114/7fffa75c/attachment.pgp 


More information about the bazaar mailing list