Is SourceForge secure?
Yes, we have taken extreme caution in the methods we use for SourceForge services. No system is uncrackable, but we continuously monitor the software we use for bugs and security holes, and audit our own software regularly. Encryption is available and enforced on all parts of the SourceForge site except mailing lists. (These passwords should be different than your site passwords. We are in the process of modifying GNU Mailman to use our own secure authentication system.) We give SSH accounts rather than telnet, SCP rather than ftp, and CVS/SSH instead of pserver. Site logins are via SSL and site passwords are never stored nor communicated in plaintext. Because it is possible to change your site password by confirming your email address (via a partial MD5 hash sent to your registered address), we recommend that you also keep your own mail account secure.
