Joch Does that mean it's possible to do this over SSL and the user still be able to authenticate against the server or is digest authentication the only option?
Thanks >> -----Original Message----- >> From: Jochem van Dieten [mailto:[EMAIL PROTECTED]] >> Sent: 16 December 2002 16:46 >> To: CF-Talk >> Subject: Re: Login/Password screen >> >> Kola Oyedeji wrote: >> > Does this send the user name and or password in plain text. >> >> Yes, if sent over a non-HTTPS connection. If you want to have the >> password encrypted use Digest Authentication (RFC 2617). Supported by >> most major browsers (IE, Mozilla, Opera but not NN 4.x). >> >> Jochem >> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq Get the mailserver that powers this list at http://www.coolfusion.com