Re: [SVN-MIGRATION] SVN authentication issues

On Mon, Dec 15, 2008 at 21:06, Gwynne Raskind
<[email protected]> wrote:
> On Dec 15, 2008, at 3:02 PM, Rasmus Lerdorf wrote:
>>>>>
>>>>> - Use Basic auth. People keep their existing passwords, but it sends
>>>>> passwords in basically cleartext over the network. I don't like this,
>>>>> but it's simpler.
>>>>>
>>>>> Please discuss.
>>>>
>>>> Is doing BasicAuth over SSL an option?  That keeps everything from
>>>> being sent in clear text w/o forcing everyone to setup a new account.
>>>
>>>
>>> To be truthful, I have no idea what the status of SSL availability on
>>> php.net is. Whether there's an SSL cert, whether Apache is set up for
>>> it, etc.
>>
>> We use SSL on master.php.net.
>>
>> eg.
>>
>> https://master.php.net/manage/users.php
>>
>> And I suggest we put a little password script there for people to verify
>> their passwords.  When they do we can store the md5 hash.
>>
>> -Rasmus
>
> I like that thought. Can you do it? I don't know enough about master works;
> it'd take me awhile to put it together. Not to mention I don't have access.

Done.

Everyone will have to "change" their passwords at
https://master.php.net/manage/users.php
Note: Re-entering your current passwords is fine.

-Hannes