From: Eric W. Biederman <ebiederm@xmission.com>
Date: Fri, 08 Jul 2005 02:11:22 GMT
Subject: Re: [ANNOUNCE] Cogito-0.12
Message-ID: <m11x6akpx1.fsf@ebiederm.dsl.xmission.com>
In-Reply-To: <Pine.LNX.4.58.0507071520220.25104@g5.osdl.org>

Linus Torvalds <torvalds@osdl.org> writes:

> On Thu, 7 Jul 2005, Eric W. Biederman wrote:
>>
>> For optimizing network bandwidth that sounds like the way to go.  For
>> adhoc development I don't know.  For a central sever you still need
>> an authenticated way to push content, which makes it another dimension
>> of the problem.
>
> I'm convinced that "ssh" is the only sane way for pushing. If you don't 
> trust somebody enough to give him ssh access, you shouldn't trust him with 
> write access to your project in the first place.

Agreed, I brought that up only so I could dismiss it :)  

> So I don't worry about pushing. I think we've got that covered. It's 
> really the anonymous pulling that needs something.

So long as we remember there is a tradeoff between efficiency and
ease of setup for anonymous access and small projects.

Eric