Re: [PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Chris Shiflett
--- Peter Lauri <[EMAIL PROTECTED]> wrote: > If you use the Autority HTTP that pops up a login window by > default, is that safe against "listeners"? Assuming you mean HTTP Basic Authentication, it is not encrypted, so it is not "safe" from snooping. Chris = Chris Shiflett - http://shiflett.

[PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Manuel Lemos
On 11/18/2004 10:23 AM, Peter Lauri wrote: If you use the Autority HTTP that pops up a login window by default, is that safe against "listeners"? It depends on the authentication method. Basic authentication method passes passwords as base64 encoded plain text. Digest and even NTLM are safer beca

[PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Sebastian Mendel
Peter Lauri wrote: If you use the Autority HTTP that pops up a login window by default, is that safe against "listeners"? IMHO, the login-data is sent as plain text also, and this with every subsequent request! and not only with the first! -- Sebastian Mendel www.sebastianmendel.de www.warzonez.d

[PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Peter Lauri
If you use the Autority HTTP that pops up a login window by default, is that safe against "listeners"? /Peter "Sebastian Mendel" <[EMAIL PROTECTED]> skrev i meddelandet news:[EMAIL PROTECTED] > Peter Lauri wrote: > > Best groupmember, > > > > I am about to develop an simple admintool for a webpag

[PHP] Re: Sequrity without HTTPS?

2004-11-18 Thread Sebastian Mendel
Peter Lauri wrote: Best groupmember, I am about to develop an simple admintool for a webpage. My webhost (crappy but nonexpensive) does not support HTTPS and I still want to be able to create some sort of secure login. For the moment I am just using a form that sends the username and passwd with PO