Well, the username and password are base64 encoded, only. So, they really are being sent in clear text. (the header decodes to myUserName:myPassword)

-Fred

On Oct 27, 2008, at 3:00 AM, Gabo Manuel wrote:

One thing I noticed though was that even though the sample shows it as Basic, the username and pwd are not in clear text:

GET /cxf/services/rest/Accounts/Account/1 HTTP/1.1
User-Agent: Jakarta Commons-HttpClient/3.1
Authorization: Basic bXlVc2VyTmFtZTpteVBhc3N3b3Jk
Host: localhost:8081

Reply via email to