[Zope-dev] Re: http access to svn repos?

2006-03-11 Thread Rocky Burt
On Tue, 2006-07-03 at 09:35 +, Chris Withers wrote: > *sigh* red tape wins again. It's much easier to just do nothing, and > just not be able to contribute from behind a firewall... Yeah, this is always unfortunate. > > The issues aren't so much technical feasibility as social / legal: a >

Re: [Zope-dev] Re: http access to svn repos?

2006-03-09 Thread Martijn Pieters
On 3/8/06, Jim Fulton <[EMAIL PROTECTED]> wrote: > OK, for those not familiar with svn/HTTP authentication, as I understand it > you have to authenticate for each session and your credentials are cached in > clear text in your home directory. The storage of clear-text credentials > is obviously la

Re: [Zope-dev] Re: http access to svn repos?

2006-03-09 Thread Chris Withers
Jim Fulton wrote: OK, for those not familiar with svn/HTTP authentication, as I understand it you have to authenticate for each session and your credentials are cached in clear text in your home directory. Well, you _either_ have to authenticate once per session _or_ your credentials are cach

Re: [Zope-dev] Re: http access to svn repos?

2006-03-09 Thread Chris Withers
Tino Wildenhain wrote: I would support HTTP anonymous checkouts. I'm really against writable HTTP checkouts because I consider the credentials mechanism for HTTP access to be extremely lame. whether SVN or not, I'm guessing any use of HTTP basic authentication mechanism qualifies as "extremel

Re: [Zope-dev] Re: http access to svn repos?

2006-03-08 Thread Jim Fulton
Mark Hammond wrote: Chris quoting Jim: ... whether SVN or not, I'm guessing any use of HTTP basic authentication mechanism qualifies as "extremely lame"! I've no idea if this is what Jim meant though :) OK, for those not familiar with svn/HTTP authentication, as I understand it you have to

Re: [Zope-dev] Re: http access to svn repos?

2006-03-08 Thread Tino Wildenhain
Mark Hammond schrieb: Chris quoting Jim: ... I would support HTTP anonymous checkouts. I'm really against writable HTTP checkouts because I consider the credentials mechanism for HTTP access to be extremely lame. whether SVN or not, I'm guessing any use of HTTP basic authentication mech

RE: [Zope-dev] Re: http access to svn repos?

2006-03-08 Thread Mark Hammond
Chris quoting Jim: > > lame program for uploading keys, I find the ssh-based access > > mechanism to be far more usable and secure. > > Secure, maybe, but is it really worth it? > > Usable? Don't agree, especially if you're trying to develop on Windows... As a data-point, for the last year or 2,

Re: [Zope-dev] Re: http access to svn repos?

2006-03-08 Thread Chris Withers
Jim Fulton wrote: At one point, enabling the 'http:' checkout gateway was a sure-fire recipe for getting SVN's knickers in a twist, which is why we disabled it. Or maybe that was ViewCSV. Actually, it was BekeleyDB. :) And Jens has fixed that now, iirc? The main obstical was that it requir

Re: [Zope-dev] Re: http access to svn repos?

2006-03-07 Thread Jim Fulton
Tres Seaver wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Withers wrote: Would anyone be averse to making anonymous http checkouts possible from zope.org? Some of us are behind annoying proxies that won't let svn through :-/ At one point, enabling the 'http:' checkout gateway

[Zope-dev] Re: http access to svn repos?

2006-03-07 Thread Chris Withers
Tres Seaver wrote: Where should I write the proposal? Who is going to review it? http://www.zope.org/Wikis/DevSite/Proposals ; post here and zope3-dev for review. yay! a wiki... oh the joy... You need to identify potential issues, document any changes needed to the Apache config (to enable

Re: [Zope-dev] Re: http access to svn repos?

2006-03-06 Thread Tino Wildenhain
Tres Seaver schrieb: > Chris Withers wrote: ... >>> >>>Where should I write the proposal? Who is going to review it? > > > http://www.zope.org/Wikis/DevSite/Proposals ; post here and zope3-dev > for review. +1 for http anon checkouts at least :-) > ... > -1 on using https for writable checkout

[Zope-dev] Re: http access to svn repos?

2006-03-06 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Withers wrote: > Tres Seaver wrote: > >> At one point, enabling the 'http:' checkout gateway was a sure-fire >> recipe for getting SVN's knickers in a twist, which is why we disabled >> it. Or maybe that was ViewCSV. > > > It was ViewCSV, in

[Zope-dev] Re: http access to svn repos?

2006-03-06 Thread Chris Withers
Tres Seaver wrote: At one point, enabling the 'http:' checkout gateway was a sure-fire recipe for getting SVN's knickers in a twist, which is why we disabled it. Or maybe that was ViewCSV. It was ViewCSV, in particular, the tarball download... In any case, I would guess that you might persua

[Zope-dev] Re: http access to svn repos?

2006-03-06 Thread Tres Seaver
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Withers wrote: > Would anyone be averse to making anonymous http checkouts possible from > zope.org? > > Some of us are behind annoying proxies that won't let svn through :-/ At one point, enabling the 'http:' checkout gateway was a sure-fire