On Fri, 2003-07-11 at 12:49, Adam Aube wrote:
> A good compromise would be for Mozilla to prompt for username, password,
> and domain, then use that info to do NTLM. Wouldn't have all the
> benefits of Windows NTLM, but would be more secure than basic and
> wouldn't require cleartext password storage like digest.
Digest, per se, doesn't require clear text password storage.
Squids supplied helper uses cleartext, but that is simply -a-
implementation. Squid itself never needs the cleartext password.
Rob
-- GPG key available at: <http://members.aardvark.net.au/lifeless/keys.txt>.
This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:17:56 MST