OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Len_LattanziStanfordAlumni.org
Date: Sat Jan 05 2002 - 20:04:49 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    On 2002-01-05 17:17:35 -0800, Mark Curphey wrote:
    > Dave Zimmer wrote this great paper on HTTP Authentication for the new
    > Monthly OWASP Guest White paper section.
    >
    > http://www.owasp.org/resources/whitepapers/http_authentication.txt
    >
    Nice summary. I'd add the following caveats.

    While Apache supports digest authentication only a few clients support
    it such as wget, amaya and mozilla. Notably neither IE5.5 nor NS4.7x do.

    To test a client try
    http://jigsaw.w3.org/HTTP/Digest/

    both wget and mozilla can handle
    jigsaw.w3.org/HTTP/Digest/">http://guest:guestjigsaw.w3.org/HTTP/Digest/

    -Len