[Seaside] WABasicAuthentication

Avi Bryant avi.bryant at gmail.com
Fri Mar 25 18:10:26 CET 2005


On Fri, 25 Mar 2005 12:06:29 -0500, Daniel Salama <dsalama at user.net> wrote:

> Now, what I'd like to be able to do is, instead of using the standard
> WABasicAuthentication that opens up a browser login window, I'd like to
> be able to redirect the user to a login form. WABasicAuthentication
> sends information in clear text to the server and my login form is
> running with SSL.

Maybe there's something I'm missing, but: if the connection to the
server is over SSL, why would the login form use that but not the
basic auth?  They're both just sending plaintext over HTTP.  Are
headers not encrypted with HTTPS?

Avi


More information about the Seaside mailing list