Digest authentication doesn't really work because the different
browser and server vendors never achieved interoperability.
If you're worried about transmissions being intercepted, use SSL.
Both Apache 2 and IIS have SSL built in, so it's straightforward to
implement. You can spend a
On Sun, Feb 1, 2009 at 12:15 PM, Michele Waldman wrote:
> I'm sorry for all these stupid posts. I'm in the middle of a learning
> process. It's always darkest before the dawn.
>
>
>
> I see cookies are viewable and editable.
>
>
>
> Does anyone know if any browsers allow the user to view and edi
you could use HTTPS and a simple form for authentication...that would be
transparent to PHP and could implement a secure solution for logging users
in, i am not sure if this is what you need
fernando
On Sun, Feb 1, 2009 at 2:15 PM, Michele Waldman wrote:
> I'm sorry for all these stupid posts
Michelle:
> I see cookies are viewable and editable.
>
> Does anyone know if any browsers allow the user to view and edit the request
> Authorization?
Absolutely _everything_ sent to the server can be edited in one way or
another. This includes things such as, but not limited to, user agents,
I'm sorry for all these stupid posts. I'm in the middle of a learning
process. It's always darkest before the dawn.
I see cookies are viewable and editable.
Does anyone know if any browsers allow the user to view and edit the request
Authorization?
If I hack the mod_auth_digest file t