[PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Sebastian Mendel
Peter Lauri wrote: Best groupmember, I am about to develop an simple admintool for a webpage. My webhost (crappy but nonexpensive) does not support HTTPS and I still want to be able to create some sort of secure login. For the moment I am just using a form that sends the username and passwd with

[PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Peter Lauri
If you use the Autority HTTP that pops up a login window by default, is that safe against listeners? /Peter Sebastian Mendel [EMAIL PROTECTED] skrev i meddelandet news:[EMAIL PROTECTED] Peter Lauri wrote: Best groupmember, I am about to develop an simple admintool for a webpage. My

[PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Sebastian Mendel
Peter Lauri wrote: If you use the Autority HTTP that pops up a login window by default, is that safe against listeners? IMHO, the login-data is sent as plain text also, and this with every subsequent request! and not only with the first! -- Sebastian Mendel www.sebastianmendel.de www.warzonez.de

[PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Manuel Lemos
On 11/18/2004 10:23 AM, Peter Lauri wrote: If you use the Autority HTTP that pops up a login window by default, is that safe against listeners? It depends on the authentication method. Basic authentication method passes passwords as base64 encoded plain text. Digest and even NTLM are safer

Re: [PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Chris Shiflett
--- Peter Lauri [EMAIL PROTECTED] wrote: If you use the Autority HTTP that pops up a login window by default, is that safe against listeners? Assuming you mean HTTP Basic Authentication, it is not encrypted, so it is not safe from snooping. Chris = Chris Shiflett - http://shiflett.org/