[marcus_holmes]

I was immediately struck by the scary thing of putting the password in the URL:

    remote = 'https://USERNAME:[e-mail]/DATABASE'

I know HTTPS URLs are encrypted, but it still strikes me as unsafe. What does HN think?

[fiatjaf]

This is demo code. See this comment: https://news.ycombinator.com/item?id=6612482

But it can work with cookie authentication with just a little more lines of code.