On Sun, Mar 26, 2000 at 08:04:47PM +0000, Matthias Scheler wrote:

> I would prefer "anoncvs@anoncvs.netbsd.org:/cvsroot" because "ssh" is
> IMHO the better method for anon CVS because it recognizes DNS
> spoofing via "ssh"'s host keys.

Okay. The only trouble here, however, is that the user must have ssh
installed in addition to cvs.

Maybe a FAQ entry and some docs would be sufficient. If the user is
going to use cvs to update pkgsrc, they've either got got a clue or
access to someone with a clue and would be likely to have read some-
thing in any event.

-- 
   Mason Loring Bliss   mason@acheron.middleboro.ma.us              E w i g e
awake ? sleep : dream;  http://acheron.ne.mediaone.net  B l u m e n k r a f t