CGI question: safe passwords possible?

[Gerhard Haering]

* Will Stuyvesant <hwlgw at hotmail.com> [2003-06-01 03:35 -0700]:
> I would like to thank you all for filling up some vacuums in my
> knowledge!
> 
> I was already experimenting with httplib and urllib2 modules to see if
> I can do HTTP Digest authentication but this is all very cumbersome
> and not compatible among hosts (as far as I understand).  But my
> conclusion is so much simpler that all this!  If you really want
> security, use HTTPS. [...]

You got it.

> [...] Simple, nice, elegant.
> 
> Am I right?  Is it true, the part about not having to change your HTML
> and CGI code?  Well, except for some URLs in them maybe, but they
> could be stored in a separate configuration file.  I mean, you maybe
> have to change things like http://yourhost/yourloginpage.html to
> http://yourhost/yourloginpage.shtml or something?

.sthml is usually server-parsed HTML. What you'd need to change is the
protocol. From http://... to https://...

Gerhard
-- 
http://ghaering.de/