Re: [PATCH] http: add option to try authentication without username

From: Eric Sunshine <sunshine@sunshineco.com>
Date: Feb 15, 2016, 21:46 UTC
Message-ID: <CAPig+cSphEu3iRJrkdBA+BRhi9HnopLJnKOHVuGhUqavtV1RXg@mail.gmail.com>
In-Reply-To: <xmqqsi0tpsa5.fsf@gitster.mtv.corp.google.com>

On Mon, Feb 15, 2016 at 4:39 PM, Junio C Hamano <gitster@pobox.com> wrote:

Show 12 quoted lines

> "brian m. carlson" <sandals@crustytoothpaste.net> writes:
>> On Mon, Feb 15, 2016 at 03:34:51PM -0500, Jeff King wrote:
>>> So I think this hack should remain purely at the curl level, and never
>>> touch the credential struct at all.
>>>
>>> Which is a shame, because I think Eric's suggestion is otherwise much
>>> more readable. :)
>>
>> Yes, I agree.  That would have been a much nicer and smaller change.
>
> Alright, reading all reviews and taking them into account, the
> original, when a Sign-off is added, would be acceptable, it seems.

One final question: Keeping in mind my lack of familiarity with this particular use-case, would it be possible to infer the need to employ this curl-specific workaround rather than making users tweak a config setting? Or would that be a security risk or an otherwise stupid idea?