http://www.ISAserver.org ------------------------------------------------------- What exactly does Gmail have to do with web publishing? ------------------------------------------------------- Jim Harrison MCP(NT4, W2K), A+, Network+, PCG http://isaserver.org/Jim_Harrison/ http://isatools.org Read the help / books / articles! ------------------------------------------------------- -----Original Message----- From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On Behalf Of Ruba Al-Omari Sent: Monday, June 26, 2006 05:03 To: isalist@xxxxxxxxxxxxx Subject: [isalist] Re: Authentication Question In gmail, the credentials page is secured https, then after you entre your credentials, it becomes http, does this mean the traffic sent after the authentication is done is in clear text? On 6/26/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote: How is the web listener configured? If you use "require all users.." and allow HTTP, then you're allowing your credentials to be passed in a non-secure channel. ________________________________ From: isalist-bounce@xxxxxxxxxxxxx on behalf of Tom Rogers Sent: Sun 6/25/2006 7:35 PM To: isalist@xxxxxxxxxxxxx <mailto:isalist@xxxxxxxxxxxxx> Subject: [isalist] Authentication Question Simple question: I am web publishing a helpdesk website which I made an SSL site. When I attempt to connect to the site, the authentication dialog box pops up BEFORE I see the SSL lock in MS IE. When I enter credentials, are these credentials sent SSL encrypted? I'm using NTLM authentication. After I log in, I see the SSL lock in MS IE for the site. TIA, -TRogers All mail to and from this domain is GFI-scanned. All mail to and from this domain is GFI-scanned. ------------------------------------------------------ List Archives: //www.freelists.org/archives/isalist/ ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/ ISA Server Blogs: http://blogs.isaserver.org/ ------------------------------------------------------ Visit TechGenix.com for more information about our other sites: http://www.techgenix.com ------------------------------------------------------ To unsubscribe visit http://www.isaserver.org/pages/isalist.asp Report abuse to listadmin@xxxxxxxxxxxxx