I just worked myself through a wiki article and blogposts regarding CouchDB's security.
Now I am wondering how this is done in Android. The Android platforms security is relying on sandboxing applications, so config files can not be stored every but the app directory or maybe the sd card attached.
As I learned, server admins are configured in a .ini file and the require_valid_user settings as well in regular CouchDB instances.
On Android, I know, that uppon installation, CouchDB is storing a generated server admin with password to a textfile in the CouchDB application directory. How about the other configurations?
Is "require_valid_user" for example set to true by default( is this not necessary?), or how is this solved?
If it was not necessary, then I would like to know why :-)
(I also posted this question to the couchdb mailing list and will update the answer here if I get a suitable one)
Regards, Chris