Tyr to store password in   xmlns:S="http://jakarta.apache.org/slide/";
namespace instead of DAV:
  
Changing the namespace did not work. Meanwhile, I have the folowing reply
from Joe Feise of DAV Explorer.
Hello Sativa,
It obviously is a bug in Slide to transmit the password in the clear. I
actually consider this a major security issue in Slide.
I suggest filing a bug report with the Slide developers.
In the meantime, I see if DAV Explorer can block out the password. But that
of course would only be an "security through obscurity" measure. If the user
logs all data that goes over the wire, the user would still be able to see
the password.
Regards,
-Joe

I am not sure if this qualifies as a bug, but it does cause security issues. 




-- 
View this message in context: 
http://www.nabble.com/encryption-of-password-tf2219319.html#a6282226
Sent from the Jakarta Slide - User forum at Nabble.com.


---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to