Re: Mac v. NT

This WebDNA talk-list message is from

1998


It keeps the original formatting.
numero = 16424
interpreted = N
texte = This was the primary concern I had. Those passwords could be retirved, sniffed, what ever and that could be very bad news!-----Original Message----- From: Olin Lagon To: WebDNA-Talk@smithmicro.com ; WebDNA-Talk@smithmicro.com Date: Friday, March 06, 1998 4:11 AM Subject: Re: Mac v. NT >At 06:54 PM 3/5/98 -0800, Grant Hulbert wrote: >>>Just curious why the protect tag with Mac and Webcatalog will display a >>>browser password box, allow you to enter, then cache that password while >>>your browser is open not requiring you to enter it again, and NT w/ Netscape >>>server is in an HTML for and requires me to enter my username and password >>>each time I enter a page with a [protect] tag. Or do I need to re-write my >>>files to cary that variable from page to page? >> >>WebSite does not have this restriction, but IIS does. If you are using >IIS, you will need to rewrite your templates to propagate the passwords. >The reason is that we do not want to break IIS' security scheme which is >based on local filesystem users/passwords and not arbitrary record-level >passwords like WebCatalog's. > >Be warned that propagate means that the passwords are passed through >urls/forms and are then stored in the caches, registries, and histories of >your user's browsers. Anyone with access to that machine can go after this >user provides the right authentication, view the cache or other parts where >info is stored, and login to the system. > >Aloha, Olin >---------------------------------------------------------------- >WORLDPOINT >Olin Kealoha Lagon >Director, Special Projects >Manoa Innovation Center >2800 Woodlawn Drive, Suite 170 >Honolulu, HI 96822 >Telephone (808)539-3939 >Fax (808)539-3943 >Direct (808)539-3932 > > Associated Messages, from the most recent to the oldest:

    
  1. Re: Mac v. NT (Kenneth Grome 1998)
  2. Re: Mac v. NT (Jay Van Vark 1998)
  3. Re: Mac v. NT (Jay Van Vark 1998)
  4. Re: Mac v. NT (Kenneth Grome 1998)
  5. Re: Mac v. NT (Kenneth Grome 1998)
  6. Re: Mac v. NT (Grant Hulbert 1998)
  7. Re: Mac v. NT (Raymond Hatch 1998)
  8. Re: Mac v. NT (Raymond Hatch 1998)
  9. Re: Mac v. NT (Olin Lagon 1998)
  10. Mac v. NT (Raymond Hatch 1998)
  11. Re: Mac v. NT (Olin Lagon 1998)
This was the primary concern I had. Those passwords could be retirved, sniffed, what ever and that could be very bad news!-----Original Message----- From: Olin Lagon To: WebDNA-Talk@smithmicro.com ; WebDNA-Talk@smithmicro.com Date: Friday, March 06, 1998 4:11 AM Subject: Re: Mac v. NT >At 06:54 PM 3/5/98 -0800, Grant Hulbert wrote: >>>Just curious why the protect tag with Mac and Webcatalog will display a >>>browser password box, allow you to enter, then cache that password while >>>your browser is open not requiring you to enter it again, and NT w/ Netscape >>>server is in an HTML for and requires me to enter my username and password >>>each time I enter a page with a [protect] tag. Or do I need to re-write my >>>files to cary that variable from page to page? >> >>WebSite does not have this restriction, but IIS does. If you are using >IIS, you will need to rewrite your templates to propagate the passwords. >The reason is that we do not want to break IIS' security scheme which is >based on local filesystem users/passwords and not arbitrary record-level >passwords like WebCatalog's. > >Be warned that propagate means that the passwords are passed through >urls/forms and are then stored in the caches, registries, and histories of >your user's browsers. Anyone with access to that machine can go after this >user provides the right authentication, view the cache or other parts where >info is stored, and login to the system. > >Aloha, Olin >---------------------------------------------------------------- >WORLDPOINT >Olin Kealoha Lagon >Director, Special Projects >Manoa Innovation Center >2800 Woodlawn Drive, Suite 170 >Honolulu, HI 96822 >Telephone (808)539-3939 >Fax (808)539-3943 >Direct (808)539-3932 > > Raymond Hatch

DOWNLOAD WEBDNA NOW!

Top Articles:

Talk List

The WebDNA community talk-list is the best place to get some help: several hundred extremely proficient programmers with an excellent knowledge of WebDNA and an excellent spirit will deliver all the tips and tricks you can imagine...

Related Readings:

RE: Automatic Forwarding using WebCat (1997) New NT betas available (1997) Using Cookie for client specific info? (1997) Help! WebCat2 bug (1997) Allow/Deny with Webcat? (1998) WebCatalog f2 Installation (1997) Limit picture size on upload (2005) using showpage and showcart commands (1996) Associative lookup style? + bit more (1997) Re[2]: 2nd WebCatalog2 Feature Request (1996) oops private message leaked into talk list (1997) OT: Unix Guru Needed (2003) Locking up with WebCatalog... (1997) Date comparison using showif (2003) Searching for all records (1998) PCS Frames (1997) [ModDate] & [ModTime] ? (1997) searchable list archive (1997) [WebDNA] Bug in WebDNA or in my brain? (2013) Search Via a drop down menu? (2000)