Re: Forms Authentication,Login&Password is clear text through the netw

Tech-Archive recommends: Fix windows errors by optimizing your registry

unless you use ssl, its clear text (just a form field).

-- bruce (sqlwork.com)

frank wrote:
Hi,

I have a question about asp.net Forms Authentication:
When User Login from client to web server, the UserName&Password is clear text or not if we do not use SSL.


Thanks!

.

Relevant Pages

  • Re: Mixed Mode Authentication in .net 2.0
    ... There are two parts to SSL, which is why this can be confusing. ... encryption and authentication of the server. ... ADFS supports a component called the federation service proxy which is ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Search not working
    ... Management>Authentication Providers>Edit Authentication, does not provide the ... ability to indicate whether the web application is using SSL or not. ... I changed IIS Authentication for the web site back to Integrated ... I have installed an SSL certificate and required SSL ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Can SSL sessions be compromised?
    ... the proxy machine -- if I enable local cookies for authentication this ... your "SSL server" machine may be trying to catch some simple types of ... information carried by the digital certificates was ... clicking on any RFC number, brings up that RFC in the lower RFC summary ...
    (comp.security.misc)
  • Re: Postfix + Auth + SSL + pop3s/imaps
    ... >> to use for authentication. ... Or I would still need SASL for smtp? ... >> if it's Plain or Login because I'm going to use SSL and that would ... >> encrypt both Login and the data channel. ...
    (freebsd-questions)
  • Re: SSL/https - How to configure Tomcat?
    ... One aspect of SSL is authentication. ... > You mean it's right to say that SSL is an authentication method? ... is authentic (=> could be the bad guy's server). ...
    (comp.lang.java.help)