() Richard Stallman <rms@gnu.org>
() Wed, 22 Mar 2017 12:42:02 -0400

   What sort of "creds" are they checking?

I don't know what they're checking.  My understanding is that
the site is not actually running the "community edition" variant
(from ‘git clone https://gitlab.com/gitlab-org/gitlab-ce.git’),
so even if i could understand the source in short time (i'm just
starting to study Ruby -- hints from those w/ more experience
very welcome!), the answer might not be evident there anyway.

This happens in a web-browser HTTPS session, so implicit creds
are whatever such a session entails (plus whatever the spooks
manage to sidecar into/over/around the session, i suppose).

  What do they _say_ a person needs in order to make an account?

AFAIR, there were no instructions on what constitutes an
acceptable login name, password, or email address.  Just some
input text fields.

You need to fill these in w/ a login name that's not already
assigned, a password for that login (entered twice to validate),
and an email address.  Both the "not already assigned" and the
password validation checks require Javascript, i think.

Almost forgot: there's also the usual spate of big-SaaSS icons.
Presumably you don't *need* them, but can use them (or let them
(ab)use you, more likely) as substitute forms of authentication.
Those creds i definitely lack.

-- 
Thien-Thi Nguyen -----------------------------------------------
 (defun responsep (query)
   (pcase (context query)
     (`(technical ,ml) (correctp ml))
     ...))                              748E A0E8 1CB8 A748 9BFA
--------------------------------------- 6CE4 6703 2224 4C80 7502