Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
Is there a way (on IIS 7) to use SSL during basic authentication, and then somehow go to a non-SSL session? We have an intranet app which users have requested to have visible outside the organization, so we need to SSL encrypt the basic authentication process, but there’s no real need to encrypt the rest of the session and don’t want to deal with the slowdown.
The joy (sic) of HTTP Basic authentication, besides sending the password in cleartext, is that the browser will keep sending the password, with every request sent to the server. As such, theres no real “authentication process” that is separate from the rest of the session, it occurs continuously throughout the session.
With other types of authentication, this could work if you separate out the login page to its own web app… but with basic it just wont make sense, sorry.