Re: Basic Authorization Security Issue?
From: Hector Santos (nospam_at_nospam.com)
Date: 10/30/03
- Next message: Greg: "Determine who created a file on NT4"
- Previous message: Torgeir Bakken (MVP): "Re: Login Script - Installing HotFix/Patches"
- In reply to: Jason Wade: "Re: Basic Authorization Security Issue?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 30 Oct 2003 13:12:36 -0500
"Jason Wade" <savon1414+hfrarg.gb@earthlink.net> wrote in message
> On Wed, 29 Oct 2003 04:36:59 -0600, Hector Santos wrote:
>
> > We have verified that closing the
> > browser and simply restarting to browser and going back to the web site
> > allows him to automatically relogin into a basic authentication
intranet.
> >
>
> Just curious,
>
> Do you get the same behavior when you use netscape?
Yes, according to a followup customer report:
---------- start of forwarded
message ---------
From: "XXXXXXXXXXXXXXXXXXXXXXXX>
To: <XXXXXXXXXXXXXXXXXXX>
Sent: Monday, October 27, 2003 10:55 PM
Subject: RE: Question for ya -
This is a problem with both IE and Netscape Communicator then.
Last week I logged onto the Santronics Support BBS using the Web Browser
IE6.
Since then I have closed the browser, closed Outlook, closed Netscape, but
not rebooted. There is no Active Desktop running on XP.
Today when I went to log on to the support BBS, I did not get a login box -
I was just automatically taken to the Message area.
Let's figure out where the information is being stored, and find a way to
eliminate it, if possible.
XXXXXXXXXXXXXX
---------- end of forwarded
message ---------
When the customer followed up with this report, I just threw up my hands.
It is even more incredible if Netscape also has the problem. What is
common between IE and Netscape in regards to Basic Authentication?
WININET.DLL? INETINFO.EXE?
As I said, it is an incredible claim. However, the silence from Microsoft
and the MVP is pretty much indicating it is a known problem. The "silence
is golden" policy to help protect customers is prevailing here.
-- Hector Santos WINSERVER "Wildcat! Interactive Net Server" support: http://www.winserver.com sales: http://www.santronics.com
- Next message: Greg: "Determine who created a file on NT4"
- Previous message: Torgeir Bakken (MVP): "Re: Login Script - Installing HotFix/Patches"
- In reply to: Jason Wade: "Re: Basic Authorization Security Issue?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
|
