Senthil <orsent...@gmail.com> added the comment:
This issue makes a request to implement, plain-text inurl password
authentication like "https://user:passw...@host:port/ for HTTP Basic
Authentication. " for urllib2.
As per rfc3986, this is strongly discouraged and is deprecated.
See the section: 3.2.1. User Information
Use of the format "user:password" in the userinfo field is
deprecated. Applications should not render as clear text any data
after the first colon (":") character found within a userinfo
subcomponent unless the data after the colon is the empty string
(indicating no password). Applications may choose to ignore or
reject such data when it is received as part of a reference and
should reject the storage of such data in unencrypted form. The
passing of authentication information in clear text has proven to be
a security risk in almost every case where it has been used.
Also, this was reported on 2004-09-10! We do not have any other similar
requests inline. AFAIK, current urllib2 will authenticate and fetch the
documents with HTTP Basic authentication when password is passed along
in the url like the case specifies. I do not what was the case in 2004.
My conclusion for this request is to Close it as either "Invalid" or
"Wont Fix".
----------
nosy: +orsenthil
_______________________________________
Python tracker <rep...@bugs.python.org>
<http://bugs.python.org/issue1025540>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe:
http://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com
