RE: Format for Including a Username/Password in a URL

Subject: RE: Format for Including a Username/Password in a URL
From: Goober <techcommgoober -at- yahoo -dot- com>
To: "TECHWR-L" <techwr-l -at- lists -dot- raycomm -dot- com>
Date: Wed, 15 May 2002 13:28:20 -0700 (PDT)


> Never mind. I figured out a Google search that
> worked (once I remembered to use the word "syntax").
>
> If anyone's interested the format is:
>
> protocol://username:password -at- URL
>
> The "@" was what I couldn't remember.

Bryan,

Though time-saving, it's not a very secure means of
Internet communication. When you send such a request,
it's not hashed, and anyone who might be listening on
your ports (or trying to) can pick this up. When you
visit a site, and if it's secure, your input is hashed
upon submission, but not in this case where you're
passing the username and password in clear text when
connecting to the portal.

I suppose such a protocol as you were looking for is
"mostly-harmless" if for say reading the New York
Times online, but I strongly advise against using such
protocol in the case of remote systems access or any
other protocol that would potentially give someone the
means of either mining your account or gaining entry
into a secure network.

Just a thought from the Goober...

__________________________________________________
Do You Yahoo!?
LAUNCH - Your Yahoo! Music Experience
http://launch.yahoo.com

^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Free copy of ARTS PDF Tools when you register for the PDF
Conference by May 15. Leading-Edge Practices for Enterprise
& Government, June 3-5, Bethesda,MD. www.PDFConference.com

Check out RoboDemo for tutorials! It makes creating full-motion software
demonstrations and other onscreen support materials easy and intuitive.
Need RoboHelp? Save $100 on RoboHelp Office in May with our mail-in rebate.
Go to http://www.ehelp.com/techwr-l
---
You are currently subscribed to techwr-l as: archive -at- raycomm -dot- com
To unsubscribe send a blank email to leave-techwr-l-obscured -at- lists -dot- raycomm -dot- com
Send administrative questions to ejray -at- raycomm -dot- com -dot- Visit
http://www.raycomm.com/techwhirl/ for more resources and info.



References:
RE: Format for Including a Username/Password in a URL: From: bryan . westbrook

Previous by Author: Re: Editing and writing tests for jobs
Next by Author: RE: Editing and writing tests for jobs
Previous by Thread: RE: Format for Including a Username/Password in a URL
Next by Thread: RE: Format for Including a Username/Password in a URL


What this post helpful? Share it with friends and colleagues:


Sponsored Ads