View Single Post
Old 12-12-2003, 01:10 PM  
Volantt
Confirmed User
 
Join Date: Nov 2003
Location: Penguin vs Devil
Posts: 745
SSLFakeBasicAuth ??

A customer of mine and I are fooling around with using SSLFakeBasicAuth to log users in to a paysite. Has anyone ever used this method before? Interested in implementing it and was wondering about some feedback on the pros and cons.

Only draw back is the user has to access the site from the computer the Certificate is loaded on after sign up.

But it would basically kill all brute force attacks and password sharing.

I have used it before with a plug-in site to secure access between the two sites. Worked quite well.

More info:
http://slwww.epfl.ch/SIC/SL/CA/access_control.html

Any opinions on this is appreciated.

V
__________________
"Only the dead have seen the end of war." - Plato
"In the abscence of orders, go find something and kill it." - Erwin Rommel
"A man's worth is no greater then the worth of his ambitions." - Marcus Aurelius
Volantt is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote