27 Sep
2006
27 Sep
'06
5:12 p.m.
On Wed, 27 Sep 2006, IOhannes m zmoelnig wrote:
that was the point: people are automatically redirected to https://<whatever> when (before) they log into the portal, in order to not transmit passwords in plain-text. when they now edit their page, they often just copy the link from the linkbar (which now is on https). anonymous (http) visitors of the website, now get loads of https-links (and the poor server's load jumps up)
Why not use challenge-response authentication over plain http? That's secure enough, yes?
_ _ __ ___ _____ ________ _____________ _____________________ ... | Mathieu Bouchard - tél:+1.514.383.3801 - http://artengine.ca/matju | Freelance Digital Arts Engineer, Montréal QC Canada