Re: Passing credentials from asp.net to asp site

Hi, 

thinking about it...it sucks :)

to authenticate with IIS/basic you have to include a HTTP header which looks like this:

WWW-Authenticate: username:password

user/pass are encoded as a Base64 string

if you can handcraft this request on the client (by generating jscript code in the application) this *could* work

a) i am not sure if jscript has these abilities
b) this would mean that clear text credentials are embedded in the HTML

so basically - no there is no "production" way of doing this.

---------------------------------------
Dominick Baier - DevelopMentor
http://www.leastprivilege.com

Does not need to be integrated. Can be basic also.

When you say 'hacky way', would it be reliable enough for production?
We plan to limit user-base to IE6 and will have only few hundred users
max.

Could you pass on your solution pls?

Thanks,
Chumma Dede



.