Re: [SVN-MIGRATION] SVN authentication issues

Gwynne Raskind wrote: > On Dec 15, 2008, at 2:38 PM, Travis Swicegood wrote: >>> - Use Basic auth. People keep their existing passwords, but it sends >>> passwords in basically cleartext over the network. I don't like this, >>> but it's simpler. >>> >>> Please discuss. >> Is doing BasicAuth over SSL an option? That keeps everything from >> being sent in clear text w/o forcing everyone to setup a new account. > > > To be truthful, I have no idea what the status of SSL availability on > php.net is. Whether there's an SSL cert, whether Apache is set up for > it, etc. We use SSL on master.php.net. eg. https://master.php.net/manage/users.php And I suggest we put a little password script there for people to verify their passwords. When they do we can store the md5 hash. -Rasmus