Opinions - not on what happens to day in 1.3 but what should happen in a
perfect world:
Given a config like this:
<Directory /my/secrets>
AuthType basic
AuthName Restricted area
</Directory>
What should happen ? Allowed in with, or without a password ? What would
users feel as most logical ?
Then
<Directory /my/secrets>
AuthType basic
AuthName Restricted area
<Limit POST>
require valid-user
</Limit>
</Directory>
Same here when using a GET. (Note - I've not even started with 'allow
from' or 'satisfy any complexity).
Thanks,
Dw
--
Dirk-Willem van Gulik