WebApp Sec mailing list archives
Re: Problems with most web app auth schemes
From: <webappsec () technicalinfo net>
Date: Mon, 28 Jul 2003 09:13:20 +0100
After reading through alot of postings on this thread, I would suggest the following two relevant papers that go into some depth on the issues including recommendations: Custom HTML Authentication - Best Practices on Securing Custom HTML Authentication Procedures - http://www.technicalinfo.net/papers/CustomHTMLAUthentication.html Web Based Session Management - Best Practices in Managing HTTP Based Client Sessions - http://www.technicalinfo.net/papers/WebBasedSessionManagement.html
Current thread:
- Re: Problems with most web app auth schemes, (continued)
- Re: Problems with most web app auth schemes Erik Kangas, PhD (Jul 26)
- Re: Problems with most web app auth schemes Brant Langer Gurganus (Jul 27)
- Re: Problems with most web app auth schemes Tim (Jul 27)
- Re: Problems with most web app auth schemes George W. Capehart (Jul 27)
- Re: Problems with most web app auth schemes Tim (Jul 27)
- Re: Problems with most web app auth schemes George W. Capehart (Jul 28)
- Re: Problems with most web app auth schemes Tim (Jul 27)
- Re: Problems with most web app auth schemes Ingo Struck (Jul 27)
- Re: Problems with most web app auth schemes Ingo Struck (Jul 27)