A very useful feature would be the ability to allow or require a
user to authenticate to the site using SSL client auth. The
webserver itself would handle the authentication, at which point
Gallery would just have to look at the SSL_CLIENT_S_DN_CN
(Apache 2) or SSL_CLIENT_CN (Apache 1) to get the user name.
The user would not have to explicitly log into Gallery at this point.
This would allow a site to use a single authentication function (SSL
client auth) for multiple sections of the website, while at the same
time increasing security (much harder to crack and RSA key than a
password).
Logged In: YES
user_id=978926
We are interested in developing this for G1 and G2.