Joch

Does that mean it's possible to do this over SSL and the user still be
able to authenticate against the server or is digest authentication the
only option?

Thanks

>> -----Original Message-----
>> From: Jochem van Dieten [mailto:[EMAIL PROTECTED]]
>> Sent: 16 December 2002 16:46
>> To: CF-Talk
>> Subject: Re: Login/Password screen
>> 
>> Kola Oyedeji wrote:
>> > Does this send the user name and or password in plain text.
>> 
>> Yes, if sent over a non-HTTPS connection. If you want to have the
>> password encrypted use Digest Authentication (RFC 2617). Supported by
>> most major browsers (IE, Mozilla, Opera but not NN 4.x).
>> 
>> Jochem
>> 
>>

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4
Subscription: 
http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Get the mailserver that powers this list at http://www.coolfusion.com

Reply via email to