Re: [squid-users] Re: ntlm won't prompt

From: Henrik Nordstrom <hno@dont-contact.us>
Date: Fri, 11 Jul 2003 10:24:07 +0200

On Friday 11 July 2003 03.41, Adam Aube wrote:

> Quite frankly, if you can use NTLM auth, do it. That is the one
> feature in IE that I wish other browsers would emulate.

The NTLM over HTTP is fundamentally broken in it's design and should
never have seen the light. A classical "do it our way without regards
to standards" invention by Microsoft.

The exact same thing (automatic single sign on, without risking the
users private password) is fully possible to do with Digest MD5-sess
authentication, and I wish browser and OS vendors would see the light
and do so.

-- 
Donations welcome if you consider my Free Squid support helpful.
https://www.paypal.com/xclick/business=hno%40squid-cache.org
If you need commercial Squid support or cost effective Squid or
firewall appliances please refer to MARA Systems AB, Sweden
http://www.marasystems.com/, info@marasystems.com
Received on Fri Jul 11 2003 - 02:24:27 MDT

This archive was generated by hypermail pre-2.1.9 : Tue Dec 09 2003 - 17:17:56 MST