Re: is htpasswd enough - apache security

[Anthony Schorer <as...@warpedlight.com>]

It's insecure for password purposes, simply because the password will 
travel unencrypted over the internet to the webserver (unless you're 
using SSL, etc). If you're restricting access based on IP ranges, I 
believe it's "secure enough" (whatever that means :))



On Wed, 29 May 2002, Stuart Otway wrote:

> hiya,
> 
> im looking to secure some pages on a webserver to only allow access to
> certain people on a certain ip address range. I was thinking of using a
> .htaccess file or something to secure the pages but i have heard that it is
> not that secure. Is that true?
> 
> Does anyone have any other decent ways of securing certain folders?
> 
> thanks
> stu
> 
> 
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
> For additional commands, e-mail: users-help@httpd.apache.org
> 

-- 
/*-------------
 Anthony Schorer

 aschorer@warpedlight.com
 http://www.warpedlight.com
 -------------*/


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@httpd.apache.org
For additional commands, e-mail: users-help@httpd.apache.org