Re: [SVN-MIGRATION] SVN authentication issues

Gwynne Raskind wrote:
> On Dec 15, 2008, at 2:38 PM, Travis Swicegood wrote:
>>> - Use Basic auth. People keep their existing passwords, but it sends
>>> passwords in basically cleartext over the network. I don't like this,
>>> but it's simpler.
>>>
>>> Please discuss.
>> Is doing BasicAuth over SSL an option?  That keeps everything from
>> being sent in clear text w/o forcing everyone to setup a new account.
> 
> 
> To be truthful, I have no idea what the status of SSL availability on
> php.net is. Whether there's an SSL cert, whether Apache is set up for
> it, etc.

We use SSL on master.php.net.

eg.

https://master.php.net/manage/users.php

And I suggest we put a little password script there for people to verify
their passwords.  When they do we can store the md5 hash.

-Rasmus