Re: Password protected access

2002-05-20 Thread Andreas Gietl
er getting the lock > icon on the bottom) will also be encrypted? > > -Original Message- > From: Peter Viertel [mailto:[EMAIL PROTECTED]] > Sent: Monday, May 20, 2002 1:04 PM > To: [EMAIL PROTECTED] > Subject: Re: Password protected access > > > Sure, >

RE: Password protected access

2002-05-20 Thread Potts, Ross A.
- From: Peter Viertel [mailto:[EMAIL PROTECTED]] Sent: Monday, May 20, 2002 1:04 PM To: [EMAIL PROTECTED] Subject: Re: Password protected access Sure, If you're going to use the default http auth mechanism, then use SSL. if the URL is https:// something then it's all encrypted. (ok,

Re: Password protected access

2002-05-20 Thread Andreas Gietl
On Monday 20 May 2002 18:46, Potts, Ross A. wrote: Hi Ross, it isn't true it is sent plaintext. It is sent base64 encrypted, which is in case of security just as insecure as plaintext. But if you connect to the host containing the password-realm via ssl/https your password is encrypted just t

Re: Password protected access

2002-05-20 Thread Peter Viertel
Sure, If you're going to use the default http auth mechanism, then use SSL. if the URL is https:// something then it's all encrypted. (ok, unless you do something really odd with the server config). Note that the 'password window' is something your browser displays - once it's got the password