On Wed, Sep 07, 2011 at 02:56:03PM +0200, Michael J Gruber wrote: > So, it's been a year or more that you've been aware of the importance > of this issue (from your/github's perspective), and we hear about it > now, at the end of the rc phase. I don't know whether > jk/http-auth-keyring has been done on github payroll or during spare > time. To be absolutely clear here, this feature was 100% paid for by GitHub (which isn't to say that I don't think it's a good idea. On the contrary, I think it's awesome; but GitHub money is what provided the time for me to work on it). When I started at GitHub in January, I was given a giant list of things that GitHub felt would make core git better, but that they hadn't the personnel to improve. And I was told to use my own judgement in adding or removing items from the list based on what I thought git needed, and to prioritize as I saw fit. The fact that it took six months for me to come up with credential patches is because that's how long it took me to figure out what I wanted to write, and to clear my backlog of other git tasks. So I think the wheels have been turning on this for quite a while from GitHub's perspective. At the same time, I agree very much with Junio; releasing something with a bad API and then having to fix it later is much worse than delaying the release of a feature by a little bit. And we have very little data on whether the API is "right" at this point. Initially I was concerned that there wasn't going to be enough interest while the patches were in 'next', and that we would have to make a release in order to get people interested enough in writing helpers. But right after I said that, Lukas Sandström showed up with a kdewallet helper. And Ted Zlatanov is working on something for the freedesktop secrets API. And already there's been some discussion that perhaps the current interface isn't quite what we want and is going to need tweaking. So we are moving forward, and I still hope that we can target the next release of "master" in 8-10 weeks. But this time with more confidence that what's being released is actually right. In the meantime, the best thing we can do to push it forward is to write helpers. I implemented some basic ones that should work anywhere, but aren't as nice as integration with existing keychains. Some people are working on Linux ones. The single best thing GitHub can do to push this forward right now is to provide a well-written OS X Keychain helper, and to provide feedback on whether git's end of the API is good enough. -Peff -- To unsubscribe from this list: send the line "unsubscribe git" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html