Beth E. Okun wrote:
We're running Apache with ssl enabled..........We're using Basic authentication, and if the user browses away from our site and then comes back, they are not forced to log on again.......it appears that these settings are being stored somewhere, or that the connection is not being closed..........
How about to read about how Basic Authentication works? Or maybe watch the traffic with http://livehttpheaders.mozdev.org? Basically the browser caches username/password once entered for a HTTP authc realm and sends it in the header of every HTTP request. That's the problem with HTTP basic authc.
Ciao, Michael. ______________________________________________________________________ Apache Interface to OpenSSL (mod_ssl) www.modssl.org User Support Mailing List modssl-users@modssl.org Automated List Manager [EMAIL PROTECTED]