We use HTTP internally in Vienna plus ssh tunnels for our guys in Toronto and 
Mountain View.

Would native SSH support also be a possible option?
If so, one could also use GPG or even official X.509 certificates - no 
cleartext passwords anymore...

LieGrü,
strub

--- Wendy Smoak <[EMAIL PROTECTED]> schrieb am Mi, 21.5.2008:

> Von: Wendy Smoak <[EMAIL PROTECTED]>
> Betreff: Re: [SURVEY] How does your team retrieve artifacts?
> An: "Maven Users List" <users@maven.apache.org>
> Datum: Mittwoch, 21. Mai 2008, 22:07
> On Tue, May 20, 2008 at 11:15 PM, Jason van Zyl
> <[EMAIL PROTECTED]> wrote:
> 
> > [X] Our team uses HTTP to retrieve our artifacts
> 
> ... and should be using HTTPS because some repos require
> authentication.  While we're on the subject, the plain
> text passwords
> in settings.xml are a problem (violation of corporate
> policy that
> passwords always be encrypted.)
> 
> -- 
> Wendy
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail:
> [EMAIL PROTECTED]


      __________________________________________________________
Gesendet von Yahoo! Mail.
Dem pfiffigeren Posteingang.
http://de.overview.mail.yahoo.com

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to