Re: Secure Web Page Authentication

anonymous_at_discussions.microsoft.com
Date: 10/29/03 

Date: Tue, 28 Oct 2003 18:54:49 -0800

It is an Https secured website I'm connecting to but if I
send the user name and password via the below method, will
the username and password be sent in plain text in the
first packet to the website before the secured connection
is acquired?

>-----Original Message-----
>Depends on if the website uses SSL or not.
>https:// will go through encrypted connection.
>http:// will not.
>DNS doesn't deal with data.
>Data packets go through routers.
>Anything out there on the internet can cache the data.
>So use https/SSL websites
>
>"Lee" <lee.halford@computerland.co.nz> wrote in message
>news:053201c39dc5$754b1980$a601280a@phx.gbl...
>> Secure Web Page Authentication
>>
>> When you type your user name and password before a
website
>> address into Internet explorer to pass your credentials
>> through to the secure web site in this format:
>>
>> username:password@www.website.com
>>
>> Is this information sent through the web to the website
>> across the DNS servers in plain text and if it is, is it
>> stored on the DNS cache for other people to look at
>> easily; or is it cached on the computer browser cache,
>> till it is required and inserted into the required
>> sections of the authentication section and then removed
>> from the PC cache?
>>
>
>
>
>.
>

Relevant Pages

  • Secure website (cookie/session)
    ... Secure a part of my website. ... access to server settings (session timeout, security,...). ... do not lose time re-submitting it because the use was redirect to the ...
    (microsoft.public.inetserver.iis.security)
  • Secure website (cookie/session)
    ... Secure a part of my website. ... access to server settings (session timeout, security,...). ... do not lose time re-submitting it because the use was redirect to the ...
    (microsoft.public.inetserver.iis.security)
  • Removing Requirment for an SSL connection
    ... I have SBS 2000 running with IIS and Exchange and went through this ... We set the default website up to require an SSL connection because we didn't ... Office Scan) so of course this now required a secure connection to connect ...
    (microsoft.public.inetserver.iis)
  • Removing Requirement for SSL
    ... I have SBS 2000 running with IIS and Exchange and went through this ... We set the default website up to require an SSL connection because we didn't ... Office Scan) so of course this now required a secure connection to connect ...
    (microsoft.public.inetserver.iis.security)
  • Re: Form (in)Security?
    ... > website, the website must see that the form 'action' is a secure site. ... if the document with the form has 'lock icon' - ...
    (alt.html)
Loading