SV: CGI question: safe passwords possible?
Gerhard Haering
gh at ghaering.de
Sun Jun 1 10:21:12 EDT 2003
* Carsten Gehling <carsten at gehling.dk> [2003-06-01 11:11 +0200]:
> > Fra: python-list-admin at python.org
> > [mailto:python-list-admin at python.org]Pa vegne af Gerhard Haring
> > Sendt: 31. maj 2003 12:26
>
> > That's why I recommended to use digest authentication.
> >
> > See http://httpd.apache.org/docs/mod/mod_auth_digest.html
> >
> > It implements a similar algorithm that your proposed JavaScript gimmick
> > did. Only that it works with all modern browsers, JavaScript enabled or
> > not and that it's a standard.
>
> From http://httpd.apache.org/docs/mod/mod_auth_digest.html :
>
> "Note: MD5 authentication provides a more secure password system than Basic
> authentication, but only works with supporting browsers. As of this writing
> (October 2001), the only major browsers which support digest authentication
> are Opera 4.0, MS Internet Explorer 5.0 and Amaya. [...]
October 2001 is long gone.
Mozilla (Netscape [1], ...): yes
Konqueror (possible Safari): yes
w3m: yes
lynx: no
links: no
Gerhard
[1] *Not* Netscape 4.x obviously. But I'm very happy to desupport this
beast :-P
--
http://ghaering.de/
More information about the Python-list
mailing list