Mailing-List: contact dev-help@couchdb.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@couchdb.apache.org
Received-SPF: pass (nike.apache.org: domain of jchris@gmail.com designates
 209.85.222.182 as permitted sender)
DomainKey-Signature: a=rsa-sha1; c=nofws;
        d=gmail.com; s=gamma;
        h=mime-version:sender:in-reply-to:references:date
         :x-google-sender-auth:message-id:subject:from:to:content-type;
        b=Qvn5OBDGtWJ3QT3UzOZk0DTWX8zx7JOKmF9o3LgSCVA0Toinkf3gXejrqw8WqlRJdu
         DsLaYhSVhXTz6JWHCntvZLbJhVku6Y5yNmV+I0dq9vWfRyX3wacZwg3fvu71aZmJhRP2
         8e9rqWVri8S1aXd8Xyyqpg4t/IsaNYUQKn1SM=
MIME-Version: 1.0
Sender: jchris@gmail.com
In-Reply-To: <20100203213528.GA10725@uk.tiscali.com>
References: <e282921e1002030921g53af1711r3b46ebe31f4cb38b@mail.gmail.com>
	 <20100203212426.GA10515@uk.tiscali.com>
	 <20100203213528.GA10725@uk.tiscali.com>
Date: Wed, 3 Feb 2010 16:36:56 -0800
Message-ID: <e282921e1002031636v4aca75cpce7808162f4e5c5e@mail.gmail.com>
Subject: Re: DB ACLs (was Re: 0.11 Release / Feature Freeze for 1.0)
From: Chris Anderson <jchris@apache.org>
To: dev@couchdb.apache.org
Content-Type: text/plain; charset=ISO-8859-1

On Wed, Feb 3, 2010 at 1:35 PM, Brian Candler <B.Candler@pobox.com> wrote:
> On Wed, Feb 03, 2010 at 09:24:26PM +0000, Brian Candler wrote:
>> > > (9) The _users db itself is world-readable (showing not only who your users
>> > > are, but their password hashes). Highly undesirable.
>> >
>> > I actually consider this a feature. We'd like to get some stronger
>> > password hashing (see the bcrypt threads) which should help with the
>> > password parts.
>
> Actually, passwords aren't even the issue. Just revealing the *usernames* of
> all the users on the system is the problem.
>
> For example, if I were a competitor to couch.io, I would be very happy to
> download a list of customers I should be poaching :-)

In couch.io each customer gets an entire couchdb server, so no worries
about that.

Chris


-- 
Chris Anderson
http://jchrisa.net
http://couch.io