You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@subversion.apache.org by "C. Michael Pilato (Jira)" <ji...@apache.org> on 2021/04/02 17:22:00 UTC

[jira] [Assigned] (SVN-4145) Master passphrase and encrypted credentials cache

     [ https://issues.apache.org/jira/browse/SVN-4145?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

C. Michael Pilato reassigned SVN-4145:
--------------------------------------

    Assignee:     (was: C. Michael Pilato)

> Master passphrase and encrypted credentials cache
> -------------------------------------------------
>
>                 Key: SVN-4145
>                 URL: https://issues.apache.org/jira/browse/SVN-4145
>             Project: Subversion
>          Issue Type: New Feature
>          Components: libsvn_subr
>    Affects Versions: 1.7.x
>            Reporter: C. Michael Pilato
>            Priority: Critical
>             Fix For: 1.10-consider
>
>
> {noformat:nopanel=true}
> Like all popular web browsers, Mozilla Firefox allows you to optionally cache
> passwords used for site logins. Site credentials are cached on disk, and in
> plaintext by default. However, Firefox allows you to optionally configure a
> "Master Password". This password (or passphrase) is used to encrypt the on-disk
> cached site credentials, functioning effectively the same way that a keyring
> provider and associated passphrase would work. Firefox will challenge the user
> for the master password the first time it needs to consult its credentials
> cache, and will leave the cache "unlocked" for the duration of the application's
> lifetime.
> Subversion should be able to do something similar, allowing users to optionally
> employ a master passphrase which is used to encrypt and decrypt other sensitive
> information stored in its authentication credential cache(s).
> See http://wiki.apache.org/subversion/MasterPassphrase for design thoughts.
> {noformat}
> http://wiki.apache.org/subversion/MasterPassphrase



--
This message was sent by Atlassian Jira
(v8.3.4#803005)