Re: PerlSetVar WhatEverSecure

2002-06-14 Thread Brian Reichert
On Thu, Jun 13, 2002 at 09:42:41PM -0700, Jim Helm wrote: It's not the prettiest in the world, but try this (see attached file). Thanks for the pointers; I'll give it a look-over... -- Brian 'you Bastard' Reichert[EMAIL PROTECTED] 37 Crystal Ave. #303Daytime

Re: PerlSetVar WhatEverSecure

2002-06-14 Thread Michael J Schout
On Thu, 13 Jun 2002, Brian Reichert wrote: Apache::AuthTicket says: Finally, by using the Secure mode of Apache::AuthCookie, the ticket is not passed over unencrypted connections. Passed in what direction? Client - server. rfc2109 says: Secure Optional. The Secure

Re: PerlSetVar WhatEverSecure

2002-06-13 Thread Michael Schout
Brian Reichert wrote: Location /formscript/login PerlSetVar FormScriptSecure 1 AuthType Apache::AuthTicket ... /Location But, in each case, my login program is server in the clear. What am I missing? THe authnameSecure setting only affects the cookie. If you want

Re: PerlSetVar WhatEverSecure

2002-06-13 Thread Brian Reichert
On Thu, Jun 13, 2002 at 10:40:18AM -0500, Michael Schout wrote: Brian Reichert wrote: Location /formscript/login PerlSetVar FormScriptSecure 1 AuthType Apache::AuthTicket ... /Location But, in each case, my login program is server in the clear. What am I

RE: PerlSetVar WhatEverSecure

2002-06-13 Thread Jim Helm
PerlHandler Apache::AuthTicket-login /Location --Jim -Original Message- From: Brian Reichert [mailto:[EMAIL PROTECTED]] Sent: Thursday, June 13, 2002 1:13 PM To: Michael Schout Cc: Brian Reichert; [EMAIL PROTECTED] Subject: Re: PerlSetVar WhatEverSecure On Thu, Jun 13, 2002 at 10:40