Hi Lost Admin,

Practically speaking, what do you imagine that plugin to do? Surely, you 
can't mean to store authentication credentials for your server in a way 
that everyone with half an hour of hacking lessons can either read or 
decrypt.

Of course, passwords are not persisted in the wiki as tiddlers. They 
shouldn't be visible as-is in the back-end, as is the case with store.php, 
but most of all, they should not be hidden in plain sight in the front-end 
either.

If I understand it right: basic auth means: log-in as often as the server 
tells you to and that's that.

Could you expand a little what these assertions practically mean:

My TiddlyWiki resides on a web server running Apache. It is served through 
> HTTPS and protected via HTTP Basic Auth


I did this because the web server already has HTTP Basic Auth set-up so it 
> was a simple matter to control access to the tiddlers and store.php that 
> way. 


?

Also, did you perhaps wrote the opposite of what you meant to say here:

I realize this has turned TiddlyWiki into a multi-user web based wiki 


?

Best wishes,

Tobias. 

-- 
You received this message because you are subscribed to the Google Groups 
"TiddlyWiki" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To post to this group, send email to [email protected].
Visit this group at https://groups.google.com/group/tiddlywiki.
To view this discussion on the web visit 
https://groups.google.com/d/msgid/tiddlywiki/72210426-7fc3-435f-a35b-05407f3e640f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

Reply via email to