From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.6 (2021-04-09) on dcvr.yhbt.net X-Spam-Level: X-Spam-ASN: X-Spam-Status: No, score=-3.9 required=3.0 tests=AWL,BAYES_00, HEADER_FROM_DIFFERENT_DOMAINS,MAILING_LIST_MULTI,RCVD_IN_DNSWL_HI, SPF_HELO_NONE,SPF_PASS shortcircuit=no autolearn=ham autolearn_force=no version=3.4.6 Received: from out1.vger.email (out1.vger.email [IPv6:2620:137:e000::1:20]) by dcvr.yhbt.net (Postfix) with ESMTP id 4C5B31F454 for ; Tue, 28 Mar 2023 18:55:28 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S229614AbjC1SzY (ORCPT ); Tue, 28 Mar 2023 14:55:24 -0400 Received: from lindbergh.monkeyblade.net ([23.128.96.19]:56538 "EHLO lindbergh.monkeyblade.net" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S229544AbjC1SzX (ORCPT ); Tue, 28 Mar 2023 14:55:23 -0400 Received: from cloud.peff.net (cloud.peff.net [104.130.231.41]) by lindbergh.monkeyblade.net (Postfix) with ESMTPS id AE4342139 for ; Tue, 28 Mar 2023 11:55:22 -0700 (PDT) Received: (qmail 1465 invoked by uid 109); 28 Mar 2023 18:55:22 -0000 Received: from Unknown (HELO peff.net) (10.0.1.2) by cloud.peff.net (qpsmtpd/0.94) with ESMTP; Tue, 28 Mar 2023 18:55:22 +0000 Authentication-Results: cloud.peff.net; auth=none Received: (qmail 726 invoked by uid 111); 28 Mar 2023 18:55:21 -0000 Received: from coredump.intra.peff.net (HELO sigill.intra.peff.net) (10.0.0.2) by peff.net (qpsmtpd/0.94) with (TLS_AES_256_GCM_SHA384 encrypted) ESMTPS; Tue, 28 Mar 2023 14:55:21 -0400 Authentication-Results: peff.net; auth=none Date: Tue, 28 Mar 2023 14:55:20 -0400 From: Jeff King To: Johannes Schindelin Cc: Junio C Hamano , Victoria Dye , Matthew John Cheetham via GitGitGadget , git@vger.kernel.org, Derrick Stolee , Lessley Dennington , Matthew John Cheetham , M Hickford , Jeff Hostetler , Glen Choo , =?utf-8?B?w4Z2YXIgQXJuZmrDtnLDsA==?= Bjarmason Subject: Re: [PATCH v7 00/12] Enhance credential helper protocol to include auth headers Message-ID: <20230328185520.GE18558@coredump.intra.peff.net> References: <6f83ed25-a7e1-06dd-f180-d70c7e1b1973@gmx.de> <0f94b998-e223-85cc-7730-f75675d5e649@gmx.de> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline In-Reply-To: <0f94b998-e223-85cc-7730-f75675d5e649@gmx.de> Precedence: bulk List-ID: X-Mailing-List: git@vger.kernel.org On Mon, Mar 27, 2023 at 11:10:40AM +0200, Johannes Schindelin wrote: > > I'm skeptical that it is a good idea for Git to implement a custom http > > server from scratch. > > To be clear: I never suggested to implement a generic HTTP server. > > All I wanted was to have a replacement for `git daemon` that speaks > https:// instead of git://. It does not have to speak to every browser out > there, it only needs to respond well when speaking to Git clients. That is > a much, much smaller surface than "production-ready server, HTTP/2 and so > on". I guess I don't see the point of having this in our test suite, though. We do want to test things like HTTP/2, SSL, and so on in our test suite. So either we have a split in our tests (some use apache, some don't, which presumably means many tests are still not run on Windows), or this custom HTTP server eventually grows to do all of those other things. I can see the utility outside the tests of a quick "let me stand up an HTTP server to access Git" tool. But even there, I'd be considered with feature creep as regular users ignore any warnings about its lack of encryption/robustness, and so on. And it feels like something that could utilize work already done by others in making a web server. Yes, that's a new dependency for the tool, but there are a lot of options out there. Surely one of them is worth building on? > And while the proposed test helper was not quite complete in that way, and > while it may have had much of the `git daemon` code that you would love to > lose, it would have offered an incremental way forward. > > I am afraid that this way forward is now blocked, and we're further away > from dropping that `git daemon` code you wanted to drop than ever. I don't see how pushing the same code into an http server helps. If we could have incrementally improved it there, we could incrementally improve it in git-daemon, too. -Peff