On 15 February 2016 at 15:30, erik quanstrom <quanstro@quanstro.net> wrote:

sadly among its other sins, the plan 9 webserver does use .httplogin

but that's just an ordinary name; in fact, it's exactly that name that's hidden, nothing to do with .:

httpd.c: * don't show the contents of .httplogin

httpd.c: if(strcmp(w+n-STRLEN(".httplogin"), ".httplogin") == 0)