spazontas to basic authentication

[Fanis Dokianakis]

On Mon, Jan 05, 2004 at 08:40:44AM -0800, Alaios wrote:
> apo ti stigmi pou to ethereal to kanei aytomata kai mou emfanizei ton arxiko kodiko afou ton apokodikopoiei..tha yparxei kapoios tropos gia na to kano kai xeirokinita. Mia mia entoli apo konsola isos... Rotao giati ean kapoia stigmi den exo to ethereal. Xrisimopoiontas ton kodikopoimeno passwords me mia entoli tous bash na mporo na bgalo to arxiko kodiko. Logiko den einai ayto pou rotao....e? Peste nai /....:)
>

To http authentication einai poly aplo sthn syllhpsh toy kai mallon to
eheis paranoisei entelws.
Sthrizete sthn MH KRYPTOGRAFHMENH APOSTOLH enos username kai enos
password, sthn morfh http://username:password@www.somesite.com, apo to
programma pelaths (ton browser) ston diakomisth http (ton apache).
Den yparhei dhladh kammia kryptografhsh/kwdikopoihsh pou na simbainei
endiamesa ston browser kai ton apache (ektos kai ean yparhei ssl tunnel
alla ayto einai alli istoria), opote to ethereal kalws sou dixnei to
username kai to password.

O apache omos otan pernei apo ton browser to password, gia na elegxei
thn egkyrothta toy to kvdikopoiei kata DES h MD5 kai to sygkrinei me to
topika apothikeymeno arxeio kvdikvn.

Twra gia na spaseis (giati cracking einai kai oxi apokryptografhsh h
apokwdikopoihsh)  to topika apothikeymeno password apaiteite kapio
programma san to john kai poly ypomonh.

Fanis