Re: unable to access web site embeds username & password

[Robert Hajime Lanning <robert.lanning () gmail com>]

On Tue, 22 Jun 2004 16:42:36 -0700 (PDT), Kevin R. Babcock
<kevinb () ugcs caltech edu> wrote:
> In fact, Internet Explorer and other browsers take the username and
> password out of the URL before making the request.  They are
> instead placed in headers to do HTTP Basic Authentication when the request
> is made, and so the username and password never go over the wire in a URL.
>
> -Kevin

Well, it does not go over in the GET/POST statement, but usually in
the same packet as
part of the headers following the GET/POST.  And it is in plain text
(or BASE64 encoded).

-- 
END OF LINE
       -MCP