We enabled https://phabricator.wikimedia.org/config/edit/diffusion.allow-http-auth/ in April 2014 (prior to deploying Phabricator to production) for reasons I do not remember in T123#1763.
We are getting rid of all and any code repos //canonically// hosted in Phabricator in {T191182}.
I propose that we should stop offering serving via `http` as
* all code repos on Phabricator will be only //mirrors// of other places (which are free to offer non-encrypted protocols for cloning)
* `https` is offered (and broken `ssh`, see {T347408} for that issue) for those who want to clone from Phabricator for some reason.
** I'd expect any code that pulls or pushes for mirroring to use `https` or `ssh` in 2023 and not rely on `http` (in K13, K18, K19, K32)?
* it clutters the sometimes huge list of URIs offered when browsing a Diffusion repo in a web browser and clicking the "{icon download} Clone" button (see parent task)