[darcs-users] Darcs Servers

Trent W. Buck trentbuck at gmail.com
Tue Aug 18 01:02:28 UTC 2009


Grant Husbands <darcsusers at grant.x43.net> writes:

> Max Battcher wrote:
>> By "authentication not supported", I assume you tried "HTTP Digest Auth" and
>> it doesn't work? (That is, a URL of the form http://user:pass@example.com)
>
> I had not tried that, but there'd be a very high risk of password
> disclosure in use of such a scheme (even if users are being careful to
> use --no-set-default).

Does Darcs, using libcurl, understand ~/.curlrc?  Because if so, perhaps
you could do digest with

    $ cat ~/.curlrc
    digest
    netrc-optional
    $ cat ~/.netrc
    machine example.net
      login twb
      password UNPRINTABLE

PS: my idle speculation in this thread IS idle speculation.  I'm
certainly not advocating anyone try to use an unpatched Darcs in a
security-sensitive environment.



More information about the darcs-users mailing list