RE: Basic auth by default

2007-07-17 Thread Merten Schumann
would be nice to have the NTLM support with proxies too just trying to vote for this feature request ;-) thanx Merten -Original Message- From: Hrvoje Niksic [mailto:[EMAIL PROTECTED] Sent: Thursday, June 28, 2007 12:11 PM To: wget@sunsite.dk Subject: Re: Basic auth by default Daniel

Re: Basic auth by default

2007-06-28 Thread Daniel Stenberg
On Thu, 28 Jun 2007, Hrvoje Niksic wrote: It's easy to bring back the code itself, but it's not easy to integrate it with how Wget communicates with proxies, at least not without reworking a large chunk of HTTP code. That is why I started with support for simple client NTLM and postponed

Basic auth by default

2007-06-27 Thread Micah Cowan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Mauro Tortonesi wrote: On Tue, 26 Jun 2007 13:33:35 -0700 Micah Cowan [EMAIL PROTECTED] wrote: - Wget should not be attempting basic authentication before it receives a challenge (which could be digest or what have you). This is a security

Re: Basic auth by default

2007-06-27 Thread Micah Cowan
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Micah Cowan wrote: Mauro Tortonesi wrote: On Tue, 26 Jun 2007 13:33:35 -0700 Micah Cowan [EMAIL PROTECTED] wrote: i am not so sure this is a critical point. as hrvoje pointed out, basic authentication is definitely the most used

RE: Basic auth by default

2007-06-27 Thread Barnett, Rodney
Micah Cowan wrote: However, performance at the cost of security is not a trade-off I am willing to make. Regardless of whether digest is widely used or not, any security-minded user who happens to discover the way we do things will be very upset with us, and justifiably so. This situation is

RE: Basic auth by default

2007-06-27 Thread Daniel Stenberg
On Wed, 27 Jun 2007, Barnett, Rodney wrote: I agree. I discovered this when trying to use wget with an HTTP proxy that uses NTLM. (Is that on the list somewhere?) I'm pretty sure the original NTLM code I contributed to wget _had_ the ability to deal with proxies (as I wrote the support for