Hi

----- Original Message -----
From: "Ian Frawley" <[EMAIL PROTECTED]>


> Is it not just possible through a perl module as I am not very clued
up on
> digital certificates.

Well, you have to have some credentials- and if it's not a cookie [bad
idea anyway], and if it's not a username/password- what would it be?

You could have IP address based authentication, but this is probably
more prone to misconfiguration and forgery than digital certificates.

How important is access control to your application? In other words,
where is the line on how much effort you [and your users] are going to
put into security at the expense of convenience?

\js

Reply via email to