On Wed, 5 Jul 2000, Ray Felipe wrote:
> Is there a variable that I can use that is a unique device ID of the Palm
> Pilot? Sort of like the "HTTP_X_UP_SUBNO" CGI variable from Phone.com.
>
> I need this as a form of user authentication without having a login screen.
> I will check this variable and if it is valid, the user will have access.
This type of authantication is inherently insecure. Anyone who figures
out how to forge an authenticated user's ID will be able to gain access to
your service.
Just want to let you know the risks of what you're planning to do.
--
Brian Mathis
Direct Edge
http://www.directedge.com
--
For information on using the Palm Developer Forums, or to unsubscribe, please see
http://www.palmos.com/dev/tech/support/forums/
