[Haskell-cafe] Automating Hackage accounts

[Tobias Dammers]

On Thu, Jun 13, 2013 at 09:44:03AM -0400, Andrew Pennebaker wrote:
> Could we add an HTML form for creating new Hackage accounts? Right now, our
> community is small enough that emailing ross at soi.city.ac.uk and waiting for
> a manual response isn't too bad of a problem, but as we grow, it would be
> nice for these sorts of things to be handled by a server, like with
> RubyGems and NPM.

IMHO, a more pressing issue is SSL uploads and package signing. As it
stands, anyone with a Hackage account can upload a new version of any
given package, and some wire-sniffing is enough to reveal a legit user's
password.