On 8/4/06, Danny R. Faught <[EMAIL PROTECTED]> wrote:
> One person I talked to recently hypothesized that IE intentionally makes it 
> difficult to automate the authentication dialog in order to discourage 
> hackers from using a brute force attack to crack passwords.  Seems silly now 
> that most authentication is done within an easily automatable html form.

Basic Authentication isn't really about security, though.  The
user/pass are trivially encrypted and very easy to sniff.  It's more
of a "are you sure you need to be here" gateway.

-Chris
_______________________________________________
Wtr-general mailing list
[email protected]
http://rubyforge.org/mailman/listinfo/wtr-general

Reply via email to