how to "encrypt" the password/login for the blog.rb example?

[Manfred Stienstra]

On Feb 22, 2008, at 7:28 PM, Albert Ng wrote:

> looking at the blog.rb example, I see a very nice example of  
> authentication, but the username/password is transmitted in clear  
> text form
>
> My question then is, Is there an easy way of "encrypting" that  
> information?

Well, the easiest way is to do logins over SSL. A second option could  
be HTTP Digest Authentication, but browser support for that is flackey  
to say the least. You can try digest auth, it's in Apache and probably  
in other webservers.

> If not, will I have to go the https way with apache, or is there a  
> ruby http server that can do that?

WEBRick can do SSL, see http://www.webrick.org/

Manfred