Opinions - not on what happens to day in 1.3 but what should happen in a
perfect world:

Given a config like this:

        <Directory /my/secrets>
        AuthType        basic
        AuthName        Restricted area
        </Directory>

What should happen ? Allowed in with, or without a password ? What would
users feel as most logical ?

Then
        <Directory /my/secrets>
        AuthType        basic
        AuthName        Restricted area
        <Limit POST>
                require valid-user
        </Limit>
        </Directory>

Same here when using a GET. (Note - I've not even started with 'allow
from' or 'satisfy any complexity).

Thanks,

Dw
-- 
Dirk-Willem van Gulik

Reply via email to