archiecobbs commented on issue #370:
URL: https://github.com/apache/mina-sshd/issues/370#issuecomment-1550600626

   > Still not foolproof, though.
   
   Just to be clear, I wasn't claiming this would be foolproof - just 
relatively more foolproof than before.
   
   I think any truly foolproof scheme would require reading the file anew every 
time (I think this is also what you're saying - not sure because I'm unfamiliar 
with JGit). Of course you wouldn't have to actually parse it every time - 
instead, you'd first check whether the contents hadn't changed (e.g., compute 
secure hash and compare to previous), and if not then re-use the existing 
credentials. This type of check would be relatively quick.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@mina.apache.org
For additional commands, e-mail: dev-h...@mina.apache.org

Reply via email to