Michael Ströder wrote: > Steve Holden wrote: > >>[EMAIL PROTECTED] wrote: >> >> >>>It is not impossible though and in cases where you don't have a choice >>>but to use a HTTP authentication scheme, use of AJAX may be the >>>answer to still allowing use of a form based login scheme. See: >>> >>> http://www.peej.co.uk/articles/http-auth-with-html-forms.html >>> >> >>That's neat! > > > IMHO this makes things more complicated and error-prone. And it requires > Javascript. I also can't see why this is more secure than a proper > session management (using cookies or URL for passing the session ticket > around). > I don't believe I said it *was* any of those things. But I am constantly amazed at the lengths the world will go to just to prove me wrong!
regards Steve -- Steve Holden +44 150 684 7255 +1 800 494 3119 Holden Web LLC/Ltd http://www.holdenweb.com Love me, love my blog http://holdenweb.blogspot.com Recent Ramblings http://del.icio.us/steve.holden -- http://mail.python.org/mailman/listinfo/python-list
