Re: Jumping between HTTP and HTTPS

From: Date: Tue, 22 Jul 2003 11:49:49 +0000
Subject: Re: Jumping between HTTP and HTTPS
References: 1 2 3  Groups: php.general 
Request: Send a blank email to php-general+get-156209@lists.php.net to get a copy of this message
This is what I decided to do. So the pages that need to be secured, I send the the SID as a GET QUERY variable. I don't like it, but it's the only thing I seems right. Joel Rees wrote:
if you do sniff the hash, the key, and the session. You will have to get your request in before the key becomes stale,
race, race!
In most cases the authentication is the first thing done so we're dealing with micro seconds.
Most cases? Why re-invent the wheel?


« previous php.general (#156209) next »