[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
Re: [xml-dev] RE: Encoding charset of HTTP Basic Authentication
- From: Tei <oscar.vives@gmail.com>
- To: xml-dev <xml-dev@lists.xml.org>
- Date: Thu, 23 Feb 2012 13:37:14 +0100
Protocols are fun :D
Some dude HTML page withouth HTML:
http://css-tricks.com/using-css-without-html/
My PHP script that returns a page in TXT and HTML (perhaps a way to
download a webpage that include images in parts of the multipart mime
document):
<?php
header("Subject: Test multipart");
header("MIME-Version: 1.0");
header("Content-type: multipart/x-mixed-replace; boundary=xstringx");
?>
--xstringx
Content-type: text/xml; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
<xml>Sample Text Content</xml>
--xstringx
Content-type: text/html; charset=iso-8859-1
Content-Transfer-Encoding: quoted-printable
<html>
<head>
</head>
<body>
<div style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Sample HTML =
<b>C</b>ontent</div>
</body>
</html>
--xstringx
On 23 February 2012 12:35, Pete Cordell <petexmldev@codalogic.com> wrote:
> I know this is an old thread (and this is not really the right list for a
> detailed discussion on this topic), but I did some musings on what would be
> involved to doing digest style authentication of password data in HTML form
> data. I've written a quick blog post up on it and to me it seems quite
> doable.
>
> Have a read at: http://codalogic.com/blogs/pete/?p=376
>
> Thanks for your indulgence!
>
>
> Pete Cordell
> Codalogic Ltd
> Interface XML to C++ the easy way using C++ XML
> data binding to convert XSD schemas to C++ classes.
> Visit http://codalogic.com/lmx/ or http://www.xml2cpp.com
> for more info
> ----- Original Message ----- From: "Pete Cordell" <petexmldev@codalogic.com>
> To: "Greg Hunt" <greg@firmansyah.com>
> Cc: "xml-dev" <xml-dev@lists.xml.org>
> Sent: Monday, January 30, 2012 1:52 PM
>
> Subject: Re: [xml-dev] RE: Encoding charset of HTTP Basic Authentication
>
>
>> I'm surprised I'm in a minority of one on this. I've snipped out lots of
>> comments in a reply, but my basic position is that we shouldn't be adopting
>> a "buyer beware" position when it comes to handling passwords when we know
>> there are better ways to do it, and we have known that for the best part of
>> a decade.
>>
>> The upside of this is that I will be delving into my server configs and
>> changing them to use Digest if I can. So I'm pleased that the topic has
>> been raised from that point of view.
>>
>> A quick question before I do though, does Digest require the server to
>> have access to the password in clear text form, whereas Basic allows the
>> server to store the password in some hashed form?
>>
>> Thanks,
>>
>> Pete Cordell
>> Codalogic Ltd
>> Interface XML to C++ the easy way using C++ XML
>> data binding to convert XSD schemas to C++ classes.
>> Visit http://codalogic.com/lmx/ or http://www.xml2cpp.com
>> for more info
>> ----- Original Message ----- From: "Greg Hunt" <greg@firmansyah.com>
>> To: "Pete Cordell" <petexmldev@codalogic.com>
>> Cc: "xml-dev" <xml-dev@lists.xml.org>
>> Sent: Monday, January 30, 2012 11:29 AM
>> Subject: Re: [xml-dev] RE: Encoding charset of HTTP Basic Authentication
>>
>>
>>> Surely most of us here get paid to know how things work and what their
>>> strengths and weaknesses are. The level of knowledge is sadly lower than
>>> it should be, but to paraphrase you, thats no excuse. I don't think that
>>> digest was part of HTTP 1.0 and retiring standards is difficult.
>>>
...
--
--
ℱin del ℳensaje.
[Date Prev]
| [Thread Prev]
| [Thread Next]
| [Date Next]
--
[Date Index]
| [Thread Index]
