[Wtr-general] simple solution for basic authentication
Chris McMahon
christopher.mcmahon at gmail.com
Fri Aug 4 11:34:09 EDT 2006
On 8/4/06, Danny R. Faught <faught at tejasconsulting.com> wrote:
> One person I talked to recently hypothesized that IE intentionally makes it difficult to automate the authentication dialog in order to discourage hackers from using a brute force attack to crack passwords. Seems silly now that most authentication is done within an easily automatable html form.
Basic Authentication isn't really about security, though. The
user/pass are trivially encrypted and very easy to sniff. It's more
of a "are you sure you need to be here" gateway.
-Chris
More information about the Wtr-general
mailing list