Re: Suggestion for the validator

On 20.06.01 at 11:36, Kynn Bartlett <kynn@idyllmtn.com> wrote:

>At 11:24 AM 6/20/2001 , Terje Bless wrote:
>>>In our case, our site is entirely password protected -- so we can't just
>>>send the URL through your main interface.
>>The Validator will proxy the authentication to the client so it'll be
>>just as if you'd entered the URL directly into your browser.
>
>There are a number of security risks associated with this, of course,
>aren't there?

Yes, of course. The password travels in the clear, and you'd need to trust
us not to do something nasty with it. For most sites this is ok, but there
are of course many situations where this is not appropriate. The Validator
will tell you as much when it encounters a protected realm.