Comment by zzo38computer
20 hours ago
If you want to make a better version control service, then you might consider:
- Free public repositories and free API access.
- Mutual TLS authentication. Use X.509 extensions for partial delegation of authorization, so that someone can issue a certificate to themself or others with a limited set of permissions.
- Mirroring on multiple independent services.
- Allow SHA-1 (for compatibility with a lot of existing repositories that use it, and anyone using software that does not support other hashing algorithms) but also allow other more secure hashing algorithms to be used in case you do not want to use SHA-1.
- Make the HTML to work without CSS and JavaScripts (even if they can provide enhancements, do not make them required).
- Support some parts of the GitHub API, in order that existing software which uses GitHub API will be able to work with it.
- If you are making a new API as well, then it might use DER, that can use binary data, non-Unicode text data, etc better.
- Do not require TLS for read-only access to public data (but still allow using TLS even in this case).
No comments yet
Contribute on Hacker News ↗