Quote:
Originally Posted by acidzebra
Well, aside from the "security concern" (people concerned about security generally don't allow webservers in an unknown patch/config state to be exposed on the outside of their network, and I access my box over ipsec VPN only), it just seems kind of odd to ask for the username while printing out the username.
|
There is no security concern, since as I said the security is just a function of the length of the unknown string, whether that string is split up into two parts or not is immaterial. In fact, the reason I print out the username is to emphasize that fact, as well as to emphasize that the library is shared between users. I wish there was a way to get browsers to just prompt for a key instead of a username and password, but...