The browser takes care of that, and you should not be trying to over- ride it. If you don't want to retype the username/password all the time, then you can tell teh browser to remember the password, or have the server in question not asking for the password, understanding the consequences - this latter one
being more of a 'social' issue than a technical one.

If you don't want an authentication attempt without having a secure connection,
then you could arrange to have any http pages redirect to https.

André-John

On 3-May-2009, at 14:06, Tokajac wrote:


Thank you  for the link, André-John!


User should access the application directly (not proxying).
On
http://hc.apache.org/httpclient-3.x/tutorial.html
as I see header is created for programatic access and not via browser.

Is it possible to do this when I use browser for accessing? How?


Regards

P.S.

I opened this topic on
http://www.coderanch.com/t/442467/Security/Basic-authentication-without-secure-connection
also


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to