Re: HTTP Sign-On API

["Jay Peasley" <jpeasley@xxxxxxxxxx>]

Yes, your sceanrio makes sense. Thanks for pointing it out.

Jay

----- Original Message -----
From: "Scott Klement" <klemscot@klements.com>
To: <RPG400-L@midrange.com>
Sent: Tuesday, August 08, 2000 1:19 AM
Subject: Re: HTTP Sign-On API


>
> This is true, however, in some environments this may be acceptable.
> For example, if you're only accessing the system from your internal
> LAN, or if you intend on running everything through the SSL based
> "secure server" anyway... etc.
>
> Like almost every topic posted here, there isn't really a "right" or
> "wrong" way to do something -- just what makes sense in your particular
> circumstance.
>
>
> On Mon, 7 Aug 2000, Jay Peasley wrote:
>
> > Someone correct me if I am wrong, but if you want to pass user id and
> > password through normal fields and not the HTTP protection scheme, you
will
> > need to be running through the secure server all the time so there will
be
> > some security for passwords.
> >
> > Jay
>
> +---
> | This is the RPG/400 Mailing List!
> | To submit a new message, send your mail to RPG400-L@midrange.com.
> | To subscribe to this list send email to RPG400-L-SUB@midrange.com.
> | To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
> | Questions should be directed to the list owner/operator:
david@midrange.com
> +---
>

+---
| This is the RPG/400 Mailing List!
| To submit a new message, send your mail to RPG400-L@midrange.com.
| To subscribe to this list send email to RPG400-L-SUB@midrange.com.
| To unsubscribe from this list send email to RPG400-L-UNSUB@midrange.com.
| Questions should be directed to the list owner/operator: david@midrange.com
+---