RE: Need feedback on new Mini-Redirector tutorial

> On > http://barracudaserver.com/products/BarracudaDrive/tutorials/mini_redirector.html > there seems to be a major error concerning security and authentication. > > It is the *server* that decides whether it accepts authentication or not.

You are probably right in an ideal world, but the software
will not be good at interoperating unless you accept both Basic and Digest. In
addition, one must also accept the incorrect domain name added by Microsoft
WebDAV clients. 



>So by default, if the connection is not TLS-secured, a
server MUST NOT 
>accept Basic Authentication, and it MUST NOT ask the client for Basic 

What good is this if a client sends a Basic authentication
header anyway? The damage has already happened and any eavesdropper can extract
the username and password the client sent.-W

 


_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/