Johannes Schindelin [off-list ref] writes:
even if HTTP authentication is not really strong, we could permit at least
the username to be specified. The password could come from .netrc. In this
manner, it would be possible to use different user names on the same
server.
I did not say HTTP authentication in general is not adequate (I
did say that at least digest should be used not basic, though).
How well does curl work with username but without password in a
UR,(e.g. http://joe@host.example.com/frotz/nitfol)?