Re: [SVN-MIGRATION] SVN authentication issues

Gwynne Raskind wrote: > On Dec 15, 2008, at 3:02 PM, Rasmus Lerdorf wrote: >>>>> - Use Basic auth. People keep their existing passwords, but it sends >>>>> passwords in basically cleartext over the network. I don't like this, >>>>> but it's simpler. >>>>> >>>>> Please discuss. >>>> Is doing BasicAuth over SSL an option? That keeps everything from >>>> being sent in clear text w/o forcing everyone to setup a new account. >>> >>> >>> To be truthful, I have no idea what the status of SSL availability on >>> php.net is. Whether there's an SSL cert, whether Apache is set up for >>> it, etc. >> We use SSL on master.php.net. >> >> eg. >> >> https://master.php.net/manage/users.php >> >> And I suggest we put a little password script there for people to verify >> their passwords. When they do we can store the md5 hash. >> >> -Rasmus > > I like that thought. Can you do it? I don't know enough about master > works; it'd take me awhile to put it together. Not to mention I don't > have access. Can you send me an example password file showing whatever the format is Subversion wants?