Hi Junio, On Wed, 8 Mar 2017, Junio C Hamano wrote: > * jk/http-auth (2017-02-27) 2 commits > (merged to 'next' on 2017-03-02 at 87f81b4395) > + http: add an "auto" mode for http.emptyauth > + http: restrict auth methods to what the server advertises > > Reduce authentication round-trip over HTTP when the server supports > just a single authentication method. Not only that. It fixes a bug where empty credentials were sent to a server that did not declare to Negotiate (in which case empty credentials are literally useless, and very likely incorrect). Ciao, Johannes