Re: Secure basic authentication. Is it possible?

[Duane Wessels]

On Fri, 21 May 2004, [koi8-r] "Slivarez ![koi8-r] "  wrote:

> Hi, ALL.
>
> I'm using squid-2.5.STABLE5+basic_auth(ncsa_auth). BUT simply
> Sniffer can get USERID and PASSWORD from tcp packets. Is there any
> possibility to make basic authentication more secure?

Basic authentication is fundamentally insecure.  If you need to secure
it, then you would have to use a technique like SSL port-forwarding or
IPsec encryption.

Duane W.