Re: [SVN-MIGRATION] SVN authentication issues
| From: | Gwynne Raskind | Date: | Mon, 15 Dec 2008 20:06:10 +0000 |
| Subject: | Re: [SVN-MIGRATION] SVN authentication issues | ||
| References: | 1 2 3 4 | Groups: | svn.migration |
| Request: | Send a blank email to svn-migration+get-173@lists.php.net to get a copy of this message | ||
On Dec 15, 2008, at 3:02 PM, Rasmus Lerdorf wrote:
I like that thought. Can you do it? I don't know enough about master works; it'd take me awhile to put it together. Not to mention I don't have access. -- Gwynne, Daughter of the Code "This whole world is an asylum for the incurable."We use SSL on master.php.net. eg. https://master.php.net/manage/users.php And I suggest we put a little password script there for people to verify their passwords. When they do we can store the md5 hash. -RasmusTo be truthful, I have no idea what the status of SSL availability on php.net is. Whether there's an SSL cert, whether Apache is set up for it, etc.- Use Basic auth. People keep their existing passwords, but it sends passwords in basically cleartext over the network. I don't like this, but it's simpler. Please discuss.Is doing BasicAuth over SSL an option? That keeps everything from being sent in clear text w/o forcing everyone to setup a new account.