Comment 6 for bug 126911

brain dump:

what kind of protection do we want to offer with a bzr specific authentication ?

Should we go with user/password transmitted in the clear or do we want to encrypt that part of the protocol ?

Do we want to encrypt all the protocol as soon as authentication is used ?

Do we want to encrypt all the protocol wether or not the the authentication is used ?

What encryption do we want to use ?

Should we bring that discussion to the list ? Now or when we specify the bzr authentication ?