SV: CGI question: safe passwords possible?

Gerhard Haering gh at ghaering.de
Sun Jun 1 16:21:12 CEST 2003


* Carsten Gehling <carsten at gehling.dk> [2003-06-01 11:11 +0200]:
> > Fra: python-list-admin at python.org
> > [mailto:python-list-admin at python.org]Pa vegne af Gerhard Haring
> > Sendt: 31. maj 2003 12:26
> 
> > That's why I recommended to use digest authentication.
> >
> > See http://httpd.apache.org/docs/mod/mod_auth_digest.html
> >
> > It implements a similar algorithm that your proposed JavaScript gimmick
> > did. Only that it works with all modern browsers, JavaScript enabled or
> > not and that it's a standard.
> 
> From http://httpd.apache.org/docs/mod/mod_auth_digest.html :
> 
> "Note: MD5 authentication provides a more secure password system than Basic
> authentication, but only works with supporting browsers. As of this writing
> (October 2001), the only major browsers which support digest authentication
> are Opera 4.0, MS Internet Explorer 5.0 and Amaya. [...]

October 2001 is long gone.

Mozilla (Netscape [1], ...):    yes
Konqueror (possible Safari):    yes
w3m:                            yes
lynx:                           no
links:                          no

Gerhard

[1] *Not* Netscape 4.x obviously. But I'm very happy to desupport this
beast :-P
-- 
http://ghaering.de/





More information about the Python-list mailing list