Re: HTTP Sign-On API

[Scott Klement <klemscot@xxxxxxxxxxxx>]

This is true, however, in some environments this may be acceptable.  
For example, if you're only accessing the system from your internal 
LAN, or if you intend on running everything through the SSL based
"secure server" anyway... etc.

Like almost every topic posted here, there isn't really a "right" or
"wrong" way to do something -- just what makes sense in your particular
circumstance.


On Mon, 7 Aug 2000, Jay Peasley wrote:

> Someone correct me if I am wrong, but if you want to pass user id and
> password through normal fields and not the HTTP protection scheme, you will
> need to be running through the secure server all the time so there will be
> some security for passwords.
> 
> Jay

+---
| This is the RPG/400 Mailing List!
| To submit a new message, send your mail to RPG400-L@midrange.com.
| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---