[isalist] Re: Authentication Question

  • From: "Jim Harrison" <Jim@xxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 26 Jun 2006 08:32:22 -0700

http://www.ISAserver.org
-------------------------------------------------------

What exactly does Gmail have to do with web publishing?


-------------------------------------------------------
   Jim Harrison
   MCP(NT4, W2K), A+, Network+, PCG
   http://isaserver.org/Jim_Harrison/
   http://isatools.org
   Read the help / books / articles!
-------------------------------------------------------
 

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Ruba Al-Omari
Sent: Monday, June 26, 2006 05:03
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Authentication Question

In gmail, the credentials page is secured https, then after you entre your 
credentials, it becomes http, does this mean the traffic sent after the 
authentication is done is in clear text?
 
 
On 6/26/06, Jim Harrison <Jim@xxxxxxxxxxxx> wrote: 

        How is the web listener configured?
        If you use "require all users.." and allow HTTP, then you're allowing 
your credentials to be passed in a non-secure channel. 
        
        ________________________________
        
        From: isalist-bounce@xxxxxxxxxxxxx on behalf of Tom Rogers
        Sent: Sun 6/25/2006 7:35 PM
        To: isalist@xxxxxxxxxxxxx <mailto:isalist@xxxxxxxxxxxxx> 
        Subject: [isalist] Authentication Question
        
        
        Simple question: I am web publishing a helpdesk website which I made an 
SSL site. When I attempt to connect to the site, the authentication dialog box 
pops up BEFORE I see the SSL lock in MS IE. When I enter credentials, are these 
credentials sent SSL encrypted? I'm using NTLM authentication. 
        
        After I log in, I see the SSL lock in MS IE for the site.
        
        TIA,
        
        -TRogers
        
        
        
        
        
        All mail to and from this domain is GFI-scanned.
        
        
        



All mail to and from this domain is GFI-scanned.

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: