[art] Putting actual credentials in URIs was an accident of history, let's repurpose those fields instead?

"Soni L." <fakedme+art@gmail.com> Fri, 24 February 2023 15:42 UTC

Sender: "Soni L." <fakedme@gmail.com>
Message-ID: <9568aaa5-21f3-a40c-92ed-57d8b217813f@gmail.com>
Date: Fri, 24 Feb 2023 12:42:37 -0300
MIME-Version: 1.0
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:102.0) Gecko/20100101 Thunderbird/102.7.0
Content-Language: en-US
To: art@ietf.org
From: "Soni L." <fakedme+art@gmail.com>
Content-Type: text/plain; charset="UTF-8"; format="flowed"
Content-Transfer-Encoding: 8bit
Archived-At: <https://mailarchive.ietf.org/arch/msg/art/Wjh-0sPAcyqkRoKBHmfHmCL8BXY>
Subject: [art] Putting actual credentials in URIs was an accident of history, let's repurpose those fields instead?
Precedence: list

So how bad of an idea would it be to repurpose "username" and "password" 
in URIs for all sorts of stuff? E.g. 
https://soniex2.tumblr.com/post/705832532473724928/so-heres-our-plan-we-wanna-have-web-git-urls

---

so here’s our plan: we wanna have web+git URLs, and it should look like 
web+git://username:namespace@hostname/path

so for example, on something like github, username = the username of the 
owner of the repo, namespace = always empty since github doesn’t support 
namespaces, hostname = github.com, path = repo name.

on something like bitbucket, which does support namespaces, the 
namespace can be non-empty.

on something more selfhosted, the username and namespace could be 
omitted entirely.

e.g. we could have web+git://fedi-to@github.com/fedi-to.github.io

e.g. we could have web+git://soniex2.autistic.space/dfu

how cursed is this?

-- 
1st person: we/us
2nd person: it/its
3rd person: she/they

[art] Putting actual credentials in URIs was an a… Soni L.
Re: [art] Putting actual credentials in URIs was … worley
Re: [art] Putting actual credentials in URIs was … John C Klensin
Re: [art] Putting actual credentials in URIs was … Soni L.