On 21-Nov-05, at 2:31 PM, Robert Douglass wrote:
While discussing what to ship with core I'd like to reiterate my vote to move the drupal.module to the contributions repository for this release. There are very few good uses of the "Drupal sites" feature, and the distributed login is, imo, a security risk.
Once we take it out, it's hard to get back in, especially as we talked about the various "phone home" features to gather statistics on installed modules. I would be in favour of keeping the hooks for login/authentication maintained within the drupal module, and the actual *implementation* moved to something like drupalauth.module. Or we could just fix it :P -- Boris Mann Vancouver 778-896-2747 San Francisco 415-367-3595 SKYPE borismann http://www.bryght.com