User Authentication

• The basic authentication method transmits the password unencrypted
  Example

  POST /cgi-bin/smswww HTTP/1.0
  Referer: http://www.netcs.com/pages/foo/send.html
  Proxy-Connection: Keep-Alive
  User-Agent: Mozilla/3.01 (Win95; I)
  Host: www.netcs.com
  Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, */*
  Content-type: application/x-www-form-urlencoded
  Content-length: 143
  Authorization: Basic aWV0ZopqZXRm
  

• Only useful for "advisory locks"
• Better authentication should be implemented through an SSL link and custom application code
• Cookies should not be used for authentication

• PreviousCookies
• Contents
• NextApplication-layer Attacks

 Last change: Tuesday, June 25, 2002 10:45 pm
 Unless otherwise expressly stated, all original material on this page created by Diomidis Spinellis is licensed under a Creative Commons Attribution-Share Alike 3.0 Greece License.