Re: [SVN-MIGRATION] SVN authentication issues

On Dec 15, 2008, at 3:02 PM, Rasmus Lerdorf wrote:
>>>> - Use Basic auth. People keep their existing passwords, but it  
>>>> sends
>>>> passwords in basically cleartext over the network. I don't like  
>>>> this,
>>>> but it's simpler.
>>>>
>>>> Please discuss.
>>> Is doing BasicAuth over SSL an option?  That keeps everything from
>>> being sent in clear text w/o forcing everyone to setup a new  
>>> account.
>>
>>
>> To be truthful, I have no idea what the status of SSL availability on
>> php.net is. Whether there's an SSL cert, whether Apache is set up for
>> it, etc.
> We use SSL on master.php.net.
>
> eg.
>
> https://master.php.net/manage/users.php
>
> And I suggest we put a little password script there for people to  
> verify
> their passwords.  When they do we can store the md5 hash.
>
> -Rasmus

I like that thought. Can you do it? I don't know enough about master  
works; it'd take me awhile to put it together. Not to mention I don't  
have access.

-- Gwynne, Daughter of the Code
"This whole world is an asylum for the incurable."