[TriLUG] apache passwd management strategies (subversion)

Rick DeNatale rick.denatale at gmail.com
Thu Sep 22 17:26:40 EDT 2005


On 9/22/05, Joseph Tate <dragonstrider at gmail.com> wrote:
> On 9/22/05, Rick DeNatale <rick.denatale at gmail.com> wrote:
> > I never thought about how secure (or actually insecure) the
> > Apache/HTTP password protocols were until this thread got me doing a
> > bit of googling.
> >
>
> Just do it over https.  Doesn't solve everything, but a self signed
> cert will at least keep the passwords from being sent over the clear.

As Stan would say, "Good Idea, Ollie!"

(Note to self, reconfigure Apache to use HTTPS for password protected stuff)
--
Rick DeNatale

Visit the Project Mercury Wiki Site
http://www.mercuryspacecraft.com/



More information about the TriLUG mailing list