----- Original Message ----- 
From: "Clay Larson" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, June 19, 2003 17:48
Subject: RE: [IMail Forum] Webmail: Pass Password to ASP Pages


>
>
> > have the form submit to a page with a hidden frame that keeps the
session
> > variable alive.
>
> If you have to, you can use a cookie/sql-backend combo as well, more
> complexity and development effort for more security and scalability. This
is
> the method we implement.

I wasn't thinking anything quite so complex, though this is an intruiging
idea.  What had crossed my mind is to use a session cookie which I can than
access via Javascript within the IMail templates.  If I encrypt the user id
and password into the cookie, then I can't see how it should be all that
insecure.  I will have to make a new login template because I want to make
sure that failures get sent back to my ASP login page.

Does this sound reasonable?

-- 
A. Clausen


To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Reply via email to