WebApp Sec mailing list archives

Re: HTTP Authentication & Source IP Address


From: "James Wilkinson" <james.wilkinson () jwit co uk>
Date: Sat, 30 Nov 2002 13:13:55 -0000

Hi,

In the recent discussion on HTTP Authentification, it was said (by Bob Lee)
that you can't tie the origin of the the request (the IP address) to the
session for reasons that have been discussed here time and time again.

For a recent joiner of this forum, where can I find this discussion, or
could someone please re-iterate the reasons (yet again).

Thanks.

J.
James Wilkinson
James Wilkinson IT Ltd.
email: james.wilkinson () jwit co uk
Tel: 023 80456076
Mob: 07748 992874


Current thread: