ssh and passwords

Mads Kiilerich mads at kiilerich.com
Fri Mar 25 19:06:32 CDT 2011


Jason Harris wrote, On 03/26/2011 12:31 AM:
> First: Ok... But then why are passwords in URL's allowed for https?

That is a Python standard library feature. Mercurial doesn't do anything 
to support it. (Except hiding the password before we show URLs.) There 
is also a tradition for putting passwords in http urls. ssh doesn't have 
urls and fortunately doesn't have that tradition.

> (Also you don't want to fix allowing the users to set username and password in the [auth] section for ssh connections either I take? (But you still want to allow these for https?)

I think it would be nice to have an option for using paramiko for  ssh - 
especially on windows. So far nobody has implemented that.

I'm sure Mercurial would have better support for configuring ssh if it 
had been possible. Let's see what happens if it becomes possible.

FWIW, there is anecdotal evidence that paramiko is sufficiently slower 
than "real" ssh. That might be true or not.

/Mads



More information about the Mercurial-devel mailing list