[Wtr-general] simple solution for basic authentication

Chris McMahon christopher.mcmahon at gmail.com
Fri Aug 4 11:34:09 EDT 2006


On 8/4/06, Danny R. Faught <faught at tejasconsulting.com> wrote:
> One person I talked to recently hypothesized that IE intentionally makes it difficult to automate the authentication dialog in order to discourage hackers from using a brute force attack to crack passwords.  Seems silly now that most authentication is done within an easily automatable html form.

Basic Authentication isn't really about security, though.  The
user/pass are trivially encrypted and very easy to sniff.  It's more
of a "are you sure you need to be here" gateway.

-Chris



More information about the Wtr-general mailing list