Re: [SVN-MIGRATION] SVN authentication issues

On Mon, Dec 15, 2008 at 21:06, Gwynne Raskind <gwynne@wanderingknights.org> wrote: > On Dec 15, 2008, at 3:02 PM, Rasmus Lerdorf wrote: >>>>> >>>>> - Use Basic auth. People keep their existing passwords, but it sends >>>>> passwords in basically cleartext over the network. I don't like this, >>>>> but it's simpler. >>>>> >>>>> Please discuss. >>>> >>>> Is doing BasicAuth over SSL an option? That keeps everything from >>>> being sent in clear text w/o forcing everyone to setup a new account. >>> >>> >>> To be truthful, I have no idea what the status of SSL availability on >>> php.net is. Whether there's an SSL cert, whether Apache is set up for >>> it, etc. >> >> We use SSL on master.php.net. >> >> eg. >> >> https://master.php.net/manage/users.php >> >> And I suggest we put a little password script there for people to verify >> their passwords. When they do we can store the md5 hash. >> >> -Rasmus > > I like that thought. Can you do it? I don't know enough about master works; > it'd take me awhile to put it together. Not to mention I don't have access. Done. Everyone will have to "change" their passwords at https://master.php.net/manage/users.php Note: Re-entering your current passwords is fine. -Hannes