Re: cvs commit: www/en/cgi Makefile query-pr.cgi querypr-code.cgi
On Sat, Nov 19, 2005 at 12:24:51PM +0000, Ceri Davies wrote:
> On Sat, Nov 12, 2005 at 10:35:29AM -0700, M. Warner Losh wrote:
> > In message: <20051112172425.GU94004_at_submonkey.net>
> > Ceri Davies <ceri_at_submonkey.net> writes:
> > : > > > No, just add f=raw to get the raw PR without markup.
> > : > > > http://www.freebsd.org/cgi/query-pr.cgi?pr=<PR#>&f=raw
> > : > > > ^^^^^^
> > : > >
> > : > > If you do that, then the address is in the PR header anyway, so where's
> > : > > the problem? (yes, that elides the usefulness a little, but raw links
> > : > > are not presented on the site and are therefore less spiderable).
> > <a little off-topic text deleted>
> > Ahem. Gettback back on track...
> > I've had a couple of private suggestions sent to me.
> > The first is to create a raw-query-pr.cgi that will just serve up one
> > PR in raw format with no links to this page.
> > The second is to add another parameter to query-pr that changes
> > quarterly. pass=bluestarts this quarter, pass=yellowdiamons next, etc
> > (well, we wouldn't use the ingrediants to lucky charms as a
> > password). This level of security is the same that exist on certain
> > invitation only IRC channels that are out there. Someone has to tell
> > you the password, and the password changes from time to time. Since
> > developer mail is project confidencial, I would guess it would be
> > sufficient to email the new password once a quarter.
> I have another idea. Committers could add a world-readable
> ~/.querypr.pass to their home directories containing a string that
> authenticates them for seeing email addresses. Then we have some method
> to "login" (ie, set a cookie) that lasts for a month. That method just
> checks that the string in the cookie matches the string in
> Anyway, I think that the general consensus is that the current code
I've just done this.
Any feedback on the idea floated above welcome, otherwise we'll just
stick with the status quo, I guess.
Only two things are infinite, the universe and human stupidity, and I'm
not sure about the former. -- Einstein (attrib.)
Received on Sun Dec 04 2005 - 12:53:41 UTC
- application/pgp-signature attachment: stored