[Zope] Re: Basic Authentication SSL Redirector

Tino Wildenhain tino at wildenhain.de
Fri Jun 23 09:17:42 EDT 2006


Josef Meile schrieb:
>>> Yes, but you won't send your credentials in plane text as you do with 
>>> CookieCrumble, will you?
>>
>>
>> Well, its more or less exactly the same as with BasicAuth :-)
>> (base64 plaintext vs. plaintext in html forms does not really matter)
> 
> Yes, but if you set only the authentication header in https and manually 
> came back to http, then will you send your password in plain text?

No you dont. Cookies have a setting for that.

Regards
Tino


More information about the Zope mailing list