note 47566 deleted from features.http-auth by sean
| From: | sean@php.net | Date: | Sun, 21 Nov 2004 15:06:46 +0000 |
| Subject: | note 47566 deleted from features.http-auth by sean | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-80834@lists.php.net to get a copy of this message | ||
Note Submitter: andrew of england
----
h1suzuki at hotmail dot com's note about redirecting people using authentication to https is
misguided. By the time you get to the point where Header() is executed the password has already been
sent in plaintext and the system could be comprimised.