[Zope] Security: acl_users' passwds encrypted?
Oleg Broytmann
Oleg Broytmann <phd@mail2.phd.pp.ru>
Thu, 8 Feb 2001 21:01:51 +0300 (MSK)
On Thu, 8 Feb 2001, Gary Perez wrote:
> When the user is prompted by Zope to login (user defined role, limited
> page access, etc.), are the username and password sent from the client
> to the Zope server in clear text or are they encrypted somehow?
It depends on whether you use HTTP or HTTPS. On HTTP passwords go
absoluteley unencripted.
Oleg.
----
Oleg Broytmann http://www.zope.org/Members/phd/ phd@phd.pp.ru
Programmers don't die, they just GOSUB without RETURN.