Re: [whatwg] Form-based HTTP Authentication Proof of Concept

2010-03-06 Thread Bil Corry
Kornel Lesinski wrote on 2/25/2010 6:04 PM: On Thu, 25 Feb 2010 16:00:37 -, Timothy D. Morgan tmor...@vsecurity.com wrote: As a follow up to my paper advocating HTTP authentication over cookies [1], I've built a simple sample application which demonstrates how a combination of

[whatwg] Form-based HTTP Authentication Proof of Concept

2010-02-25 Thread Timothy D. Morgan
Hello, As a follow up to my paper advocating HTTP authentication over cookies [1], I've built a simple sample application which demonstrates how a combination of XMLHttpRequest and response code tricks can be used to achieve form-based login, logout, and authenticated password changes in the

Re: [whatwg] Form-based HTTP Authentication Proof of Concept

2010-02-25 Thread Kornel Lesinski
On Thu, 25 Feb 2010 16:00:37 -, Timothy D. Morgan tmor...@vsecurity.com wrote: As a follow up to my paper advocating HTTP authentication over cookies [1], I've built a simple sample application which demonstrates how a combination of XMLHttpRequest and response code tricks can be used to