You're right, I forgot this fact, thanks!

Matthias


======= Original message from =======
> From: Mark Ziegler <[email protected]>
> To : [email protected]
> Sent: 12.09.2013 10:27:41



Am 12.09.2013 10:24, schrieb Matthias:
Dear Group,

I am not a webdav expert but I read on a microsoft website, that microsoft disabled Basic Authentication for windows due to security reasons of the Basic Authentication standard. I also read "The most serious flaw in Basic authentication is that it results in the essentially cleartext transmission of the user's password over the physical network." on this website:
http://www.webdav.org/specs/rfc2617.html#rfc.section.4.1

If I get this right, it is not a good idea that owncloud only uses this type of Authentication standard?

That's why we recommend SSL for your webserver.
_______________________________________________
Owncloud mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/owncloud

_______________________________________________
Owncloud mailing list
[email protected]
https://mail.kde.org/mailman/listinfo/owncloud

Reply via email to