To the best of my knowledge, if you use an htaccess password
(even with SSL) then I believe that the password is ALWAYS passed
as clear text.
At 12:08 PM 8/10/98 +0300, you wrote:
>I recently asked a question about encrypting a password. Thanks to Victor
>Tsaran, Chad Zimmerman, and Peter Schoenster for their replies. I think
>someone else also answered but I seem to have lost that answer.
>Someone suggested that I use a perl script to encrypt. But if I do that,
>then the password gets passed as clear text from the client to the server
>(since presumably that's where the script will be run and that's where
>the encryption will take place) and that is what I want to avoid. Someone
>suggested encrypting in javascript but I couldn't find anything in the
>documentation explaining how to do this.
>If I go the SSL route, does that mean that all documents sent have to be
>encrypted? Is that a drain on resources? All I really want encrypted is
>the password.
>I've been reading a bit on this topic and I saw a discussion on digest
>authentication. Does anyone know if there any browsers that support this?
>I looked at the netscape help but couldn't find anything.
>Thanks for any information.
>
>Malki Cymbalista
>Software Support, Weizmann Institute Computing Center
>Rehovot, Israel 76100
>Internet: [EMAIL PROTECTED]
>
>____________________________________________________________________
>--------------------------------------------------------------------
> Join The Web Consultants Association : Register on our web site Now
>Web Consultants Web Site : http://just4u.com/webconsultants
>If you lose the instructions All subscription/unsubscribing can be done
>directly from our website for all our lists.
>---------------------------------------------------------------------
>
>
Matt Soffen
==============================================
Boss - "My boss says we need some eunuch programmers."
Dilbert - "I think he means UNIX and I already know UNIX."
Boss - "Well, if the company nurse comes by, tell her I said
never mind."
- Dilbert -
==============================================
____________________________________________________________________
--------------------------------------------------------------------
Join The Web Consultants Association : Register on our web site Now
Web Consultants Web Site : http://just4u.com/webconsultants
If you lose the instructions All subscription/unsubscribing can be done
directly from our website for all our lists.
---------------------------------------------------------------------
