Re: credential files

Nigel Wade wrote:
m.roth2006@xxxxxxx wrote:
Does anyone have any idea how a browser recognizes that a cite is
asking for a
credential file, and hands it back to it?

For example, I go to a site, and firefox suddenly says "this sites
wants a credential -
is this the credential that you want to give it?" I've used a plugin
that shows me http
headers and responses, and see nothing where that happens.

Links? Pointers? Clues for the poor?

What sort of credentials are you talking about? Is this SSL (https) with
client certificate verification? If so it's part of the initial SSL
handshake. The server asks the client to prove that it is who it says it
is by supplying a valid, authenticated, certificate.

YES! Please, please, HOW DOES IT ASK? Can I provide that in the original get,
as additional headers, or do I have to wait for a response, and then provide it?

I *was* just slogging through RFC ...damn, now I can't remember, 1136? whatever
that is, and was looking for something like this....

mark

--
redhat-list mailing list
unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe
https://www.redhat.com/mailman/listinfo/redhat-list

Relevant Pages

  • Re: hash tables, non-random keys
    ... I observe you did not give anything of your ... credentials when you presented your link. ... Does it speak for ... recent articles - perhaps two dozen or so - and the responses to ...
    (comp.programming)
  • Re: ADAM and Windows Address Book
    ... checking SPA if they aren't going to use them. ... SSPI logon using the credentials of the logged on account. ... ADAM user. ... Checking SSL results in an LDAP simple bind over SSL. ...
    (microsoft.public.windows.server.active_directory)
  • Re: HTTP Network Programming Issue
    ... which requires Cookie, Authentication and SSL at the same time, while going ... through a proxy that also requires authentication. ... You should set credentials on the HttpWebRequest as ... I think the site may use cookies, ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Mixed Mode Authentication in .net 2.0
    ... SSL does not require a client certificate. ... This is important to prevent the user's credentials (either plaintext ... Good luck with ADFS. ... Co-author of "The .NET Developer's Guide to Directory Services Programming" ...
    (microsoft.public.dotnet.framework.aspnet.security)
  • Re: Using SSL
    ... > I am building an intranet application which will work with ... > read in a Microsoft article that SSL should be used on all ... > credentials in the cookie created by forms authentication. ... > Is there any way to protect the credentials but not have ...
    (microsoft.public.inetserver.iis.security)