[darcs-users] Darcs Servers
Trent W. Buck
trentbuck at gmail.com
Tue Aug 18 01:02:28 UTC 2009
Grant Husbands <darcsusers at grant.x43.net> writes:
> Max Battcher wrote:
>> By "authentication not supported", I assume you tried "HTTP Digest Auth" and
>> it doesn't work? (That is, a URL of the form http://user:pass@example.com)
>
> I had not tried that, but there'd be a very high risk of password
> disclosure in use of such a scheme (even if users are being careful to
> use --no-set-default).
Does Darcs, using libcurl, understand ~/.curlrc? Because if so, perhaps
you could do digest with
$ cat ~/.curlrc
digest
netrc-optional
$ cat ~/.netrc
machine example.net
login twb
password UNPRINTABLE
PS: my idle speculation in this thread IS idle speculation. I'm
certainly not advocating anyone try to use an unpatched Darcs in a
security-sensitive environment.
More information about the darcs-users
mailing list