Our manuallogin.asp asks for a password and a request has been made to
encrypt the password.

Does anyone know if the password is sent to the server or is a client
token written out?

Does anyone know if there is a way to use Window Integrated
Authentication with the manuallogin.asp code?

Thank you

[ Post a follow-up to this message ]

Hi MEB,

for forms login the username and password are sent in cleartext - visible to
anybody with a network sniffer.
Forms login should be protected using SSL.

Cheers,
Stefan.

--
This posting is provided "AS IS" with no warranties, and confers no rights.

MCMS FAQ:
http://download.microsoft.com/downl...>
MCMS+2002+-+(complete)+FAQ.htm
MCMS Blog: http://blogs.msdn.com/stefan_gossner/category/4983.aspx
MCMS Sample Code:
http://www.gotdotnet.com/community/...nagement+Server
MCMS Whitepapers and other docs:
http://blogs.msdn.com/stefan_gossne...2/07/41859.aspx
--------------------------------


"MEB" <mbalmes@ussco.com> wrote in message
news:73d4422f.0410201039.74e49c2d@posting.google.com...
> Our manuallogin.asp asks for a password and a request has been made to
> encrypt the password.
>
> Does anyone know if the password is sent to the server or is a client
> token written out?
>
> Does anyone know if there is a way to use Window Integrated
> Authentication with the manuallogin.asp code?
>
> Thank you

[ Post a follow-up to this message ]