bzr+ssh:// vs. bzr:// vs. sftp://

Matt Nordhoff mnordhoff at
Tue Dec 23 05:38:06 GMT 2008

Matt Nordhoff wrote:
> Tzury Bar Yochay wrote:
>> I could not find a summery page that explain the differences between
>> these different schemes.
>> I assume (correct me if I am wrong) that sftp / ssh are the same in
>> the aspect of security.
> Pretty much, yeah.

Short elaboration: Yes, they're equivalent, since they both use SSH. I
only said "Pretty much." because I don't know if SFTP has better access
control or anything.

>> What I would love to know is:
>>     1. Is using bzr+ssh:// faster than sftp:// ?
> Yes.
>>     2. Is using bzr:// alone will make the whole packs transfered as
>> clear text?
> Yes.
>> (( The current buzz around Bazaar tempting me to call it Buzzar ;-) ))
> sftp:// simply connects using SFTP. bzr+ssh:// sshes in and runs "bzr
> serve". It requires bzr be installed on the remote machine, but is faster.
> bzr:// connects, unencrypted to a "bzr serve" server on port 4155. It
> doesn't support auth, either. Security-wise, it's equivalent to
> anonymous HTTP.

More information about the bazaar mailing list