[newbie]apache authentication questions

Michael Ströder michael at stroeder.com
Tue Jun 13 04:48:46 EDT 2006


Steve Holden wrote:
> grahamd at dscpl.com.au wrote:
> 
>> It is not impossible though and in cases where you don't have a choice
>> but to use a HTTP authentication scheme, use of AJAX may be the
>> answer to still allowing use of a form based login scheme. See:
>>
>>   http://www.peej.co.uk/articles/http-auth-with-html-forms.html
>>
> That's neat!

IMHO this makes things more complicated and error-prone. And it requires
Javascript. I also can't see why this is more secure than a proper
session management (using cookies or URL for passing the session ticket
around).

Ciao, Michael.



More information about the Python-list mailing list