On 28 Oct 2013, at 11:22 , Marcus Denker <marcus.denker@inria.fr> wrote:
On 28 Oct 2013, at 11:19, phil@highoctane.be wrote:
FWIW I also have serious issues with MetacelloToolBox against an FTP repository.
We should remove FTP. FTP is evil: the passed is passed in the clear, it is old, it makes problems with NAT and firewalls.
FTP should *not* be used in 2013!
Marcus
By the first criteria, shouldnât we remove HTTP repositories as well? Base64 isnât much less plaintext than normal plaintext :) IMHO, from a security POV theyâre both usable if connecting to a local/VPNâed repository on a properly firewalled network. Which also gives an answer to the NAT/firewall dilemma, you shouldnât use FTP directly over the internet anyways. What *would* be nice, is a warning when you add a repository with an insecure authentication protocol, that it better not be accessed through public networks . Cheers, Henry