13 Jun
2013
13 Jun
'13
10:02 a.m.
On Thu, Jun 13, 2013 at 09:44:03AM -0400, Andrew Pennebaker wrote:
Could we add an HTML form for creating new Hackage accounts? Right now, our community is small enough that emailing ross@soi.city.ac.uk and waiting for a manual response isn't too bad of a problem, but as we grow, it would be nice for these sorts of things to be handled by a server, like with RubyGems and NPM.
IMHO, a more pressing issue is SSL uploads and package signing. As it stands, anyone with a Hackage account can upload a new version of any given package, and some wire-sniffing is enough to reveal a legit user's password.