> Not very secure. Pls. read the spec from W3C. Please elaborate why you think it is insecure. Digest is described as being cryptographically secure - insofar as authenticating the user to the server.
See: http://frontier.userland.com/stories/storyReader$2159 --b Bryan Batchelder eBusiness Consultant ConnectWise, Inc. 813-935-7100 x 425 > -----Original Message----- > From: Srinivasa Sivakumar [mailto:[EMAIL PROTECTED]] > Sent: Friday, April 26, 2002 3:44 PM > To: [EMAIL PROTECTED] > Subject: Re: [DOTNET] Windows authentication and Netscape > > > Not very secure. Pls. read the spec from W3C. > ----- Original Message ----- > From: "Bryan Batchelder" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, April 26, 2002 1:12 PM > Subject: Re: [DOTNET] Windows authentication and Netscape > > > Basic Authentication is cleartext, Digest is > cryptographically secure, IIRC. > > --b > > Bryan Batchelder > eBusiness Consultant > ConnectWise, Inc. > 813-935-7100 x 425 > > > > > -----Original Message----- > > From: Srinivasa Sivakumar [mailto:[EMAIL PROTECTED]] > > Sent: Friday, April 26, 2002 2:05 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [DOTNET] Windows authentication and Netscape > > > > > > Matt: > > > > Netscape supports Basic and Digest authentications not the > Integrated > > Windows Authentication. > > > > When you specify authentication mode as "Windows" it uses > the default > > Integrated Windows Authentication. You can override this using IIS > > MMC. Open the IIS MMC and go to the website or the virtual > directory > > and assign basic or digest authentication methods. > > > > Do remember both the basic and digest authentication > methods are very > > weak authentication methods with compared to Integrated Windows > > Authentication. > > > > Thanks, > > Srinivasa Sivakumar > > Developer, Author and Reviewer > > www3.brinkster.com/webguru/ > > ----- Original Message ----- > > From: "Matt Milner" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Friday, April 26, 2002 10:34 AM > > Subject: Re: [DOTNET] Windows authentication and Netscape > > > > > > not sure if this was already answered, but no, Netscape did not > > support Windows authentication last time I checked. This is an IE > > only thing. > > > > > > > > -----Original Message----- > > From: Chris Anderson > > To: [EMAIL PROTECTED] > > Sent: 4/26/02 3:46 AM > > Subject: [DOTNET] Windows authentication and Netscape > > > > I'm using Windows Authentication mode, ie > > <authentication mode="Windows" /> > > <authorization> > > <deny users="?" /> > > </authorization> > > > > and alls well in IE6 > > > > I try to see what the site will look like in Netscape (I > just wanted > > to see what the IE WebControls looked like when not using DHTML > > behaviours), and I get the following error: > > > > ----------------------- > > Access is denied. > > Description: An error occurred while accessing the > resources required > > to serve this request. The server may not be configured for > access to > > the requested URL. > > > > Error message 401.2.: Access is denied because of the Web server's > > configuration. Contact the Web server's administrator for help. > > ----------------------- > > > > If I change the authentication model to Forms, it works a treat > > > > Doesn't Netscape support Windows authentication? > > If it does, what could I be doing wrong? > > > > TIA > > Merak > > > > You can read messages from the DOTNET archive, unsubscribe from > > DOTNET, or subscribe to other DevelopMentor lists at > > http://discuss.develop.com. > > > > You can read messages from the > > DOTNET archive, unsubscribe from DOTNET, or subscribe to other > > DevelopMentor lists at http://discuss.develop.com. > > > > You can read messages from the DOTNET archive, unsubscribe from > > DOTNET, or subscribe to other DevelopMentor lists at > > http://discuss.develop.com. > > > > You can read messages from the DOTNET archive, unsubscribe > from DOTNET, or subscribe to other DevelopMentor lists at > http://discuss.develop.com. > > You can read messages from the > DOTNET archive, unsubscribe from DOTNET, or subscribe to > other DevelopMentor lists at http://discuss.develop.com. > You can read messages from the DOTNET archive, unsubscribe from DOTNET, or subscribe to other DevelopMentor lists at http://discuss.develop.com.
