Re: [boost] [website] SSL certificate

Subject: Re: [boost] [website] SSL certificate
From: Rene Rivera (grafikrobot_at_[hidden])
Date: 2010-08-16 13:14:04

On 8/16/2010 11:53 AM, Thomas Heller wrote:
> Rene Rivera wrote:
>
>> On 8/16/2010 11:39 AM, David Abrahams wrote:
>>> I suppose, pretty soon, we may
>>> not need to have any https stuff on our own domain anyway, but as long
>>> as we do have to do that, it would be good to have a cert that doesn't
>>> raise any alarms.
>>
>> Hm.. I guess this is a pertinent question.. Do we really need HTTPS
>> stuff even now? I mean..<http://svn.boost.org/svn currently>  works. So
>> it's just a matter of turning on<http://svn.boost.org/trac>.
>
> The problem is sending usernames and password unencrypted. Which would be
> the case when turning of SSL.

Even for HTTP svn doesn't send passwords in the clear, IIRC. And I'm 
fairly sure neither does Trac.

-- 
-- Grafik - Don't Assume Anything
-- Redshift Software, Inc. - http://redshift-software.com
-- rrivera/acm.org (msn) - grafik/redshift-software.com
-- 102708583/icq - grafikrobot/aim,yahoo,skype,efnet,gmail