Re: capturing basic authentication details

Hello, on 04/04/2006 04:46 PM Laura Broughton said the following: > Hello > I have created an application exchanging messages between a client and server that allows the > user to use http basic or digest authentication. Im trying to show in my work that using some kind > of network analyser eg: ethereal, you can see the password-username pair in basic authentication > being passed in plain text. Thing is, i cant get ethereal to pick this up, i just cant see the > packet passing through my network even though the application functions correctly...so it must be > somewhere! Any thoughts? Anyone have an example of what a packet would look like with the captured > username-password pair in them? Basic authentication does not exactly send the credentials in plain text, but rather base64 encoded. -- Regards, Manuel Lemos Metastorage - Data object relational mapping layer generator http://www.metastorage.net/ PHP Classes - Free ready to use OOP components written in PHP http://www.phpclasses.org/