Re: [Zope] Implementing a login form instead of BASIC authentication

2000-08-15 Thread Stephan Goeldi
Wouldn't that reduce system security? I am currently looking into implementing a login form to replace the standard BASIC authentication. Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com

Re: [Zope] Implementing a login form instead of BASIC authentication

2000-08-15 Thread Dieter Maurer
Meeting Maker Webmaster writes: I am currently looking into implementing a login form to replace the standard BASIC authentication. Have a look at GUF or the new LoginManager. They do something similar to what you want. Either, you can use them directly, or learn how they work and realize

Re: [Zope] Implementing a login form instead of BASIC authentication

2000-08-15 Thread Chris Withers
Stephan Goeldi wrote: Wouldn't that reduce system security? I think he mean cookie-based authentication, as found on zope.org. I am currently looking into implementing a login form to replace the standard BASIC authentication. Gérard, Take a look at things like LoginManager and GUF which

Re: [Zope] Implementing a login form instead of BASIC authentication

2000-08-15 Thread albert boulanger
Stephan Goeldi wrote: Wouldn't that reduce system security? I think he mean cookie-based authentication, as found on zope.org. I am currently looking into implementing a login form to replace the standard BASIC authentication. Gérard, Take a look at things like

Re: [Zope] Implementing a login form instead of BASIC authentication

2000-08-15 Thread Chris Withers
albert boulanger wrote: DIGEST seems good in that it is encrypted and uses the Challange/Response like BASIC for every HTTP transaction -- matched well with the stateless nature of HTTP. AFAIK, no browsers (maybe Mozilla, but that has the stability of a house of cards ;-) support Digest adn

Re: [Zope] Implementing a login form instead of BASIC authentication

2000-08-15 Thread Phil Harris
[Zope] Implementing a login form instead of BASIC authentication albert boulanger wrote: DIGEST seems good in that it is encrypted and uses the Challange/Response like BASIC for every HTTP transaction -- matched well with the stateless nature of HTTP. AFAIK, no browsers (maybe M