Re: [Savannah-users] git "smart http" protocol

2010-09-16 Thread James Cloos
> "AKF" == Andreas K Foerster writes: AKF> More importantly, the article suggests using Basic Authentification. AKF> That sends the password unencrypted over the line, just base64-encoded, AKF> but anybody can decode that. So, it's a very bad idea to use that for AKF> sensible data. While I

Re: [Savannah-users] git "smart http" protocol

2010-09-16 Thread Andreas K. Foerster
On Thu, Sep 16, 2010 at 08:09:47AM +0200, Sylvain Beucler wrote: > For commit access, I dislike granting Apache write access to all > repositories, because in that case any flaw in > Apache/Gitweb/CGit/etc. would allow the attacker to corrupt any > Savannah repositories. More importantly, the art

Re: [Savannah-users] git "smart http" protocol

2010-09-15 Thread Sylvain Beucler
On Thu, Sep 16, 2010 at 11:44:56AM +0900, Miles Bader wrote: > Hi, I'm wondering: are any plans to support the (relatively new) git > "smart-http" protocol on savannah...? > > [Basically it allows git to pull over http: _much_ more quickly than the > old slow git http: protocol, and I think it's

[Savannah-users] git "smart http" protocol

2010-09-15 Thread Miles Bader
Hi, I'm wondering: are any plans to support the (relatively new) git "smart-http" protocol on savannah...? [Basically it allows git to pull over http: _much_ more quickly than the old slow git http: protocol, and I think it's backward compatible (old clients that don't know about the new smart ht