As Subversion continues to gain traction within enterprise corporations, demands
around its security consciousness grow. One such demand has already bubbled up
to the top of many companies' wishlists: server-dictated policy that requires
Subversion clients to either use an encrypted password store when caching
credentials, or to not cache the credentials at all.
Subversion makes use of encrypted stores on Windows and Mac by default, and can
be compiled against GNOME or KDE libs on the Unixes to allow password caching
via those OSes' keychain mechanisms. But currently there is no way to require
(by server-dictated policy) that a user take advantage of these encrypted
stores. And therein lies the complaint.
Bug
Major