Re: Web Authentication

[Emilio Casbas <ecasbas () unav es>]

Maxim Kostyukov wrote:
> What exactly you want to achieve by doing "better web authentication"?
> In you case, what are those weaknesses with htpasswd scheme?
>
> I am asking because it is almost impossible to answer your question
> without additional info.
>
> ----- Original Message ----- From: "pimp mastermind" 
> <gbchustla () gmail com>
> To: <security-basics () securityfocus com>
> Sent: Thursday, July 20, 2006 7:36 AM
> Subject: Web Authentication
>
>
> > I have Slackware 10.1 runing. I am using it as a router and
> > fileserver. I use Apache 1.3 for web access. I have some web
> > directories which i want to secure more strongly than with htpasswd
> > but i dont know any other ways of authentication.
Never use basic authentication for confidential data.
> > Also a lot of my
> > scripts in those directories are wirted in PHP Perl and CGI scripting.
> > I need to find a better way of authentication? Does any one knows any
> > better way of authentication?
There are many ways to achieve this, you can look for digest authentication,
or you can make your own authentication script with SSL.

Thanks
Emilio C.


---------------------------------------------------------------------------
This list is sponsored by: Norwich University

EARN A MASTER OF SCIENCE IN INFORMATION ASSURANCE - ONLINE
The NSA has designated Norwich University a center of Academic Excellence 
in Information Security. Our program offers unparalleled Infosec management 
education and the case study affords you unmatched consulting experience. 
Using interactive e-Learning technology, you can earn this esteemed degree, 
without disrupting your career or home life.

http://www.msia.norwich.edu/secfocus
---------------------------------------------------------------------------