[Zope] Security: acl_users' passwds encrypted?

Oleg Broytmann Oleg Broytmann <phd@mail2.phd.pp.ru>
Thu, 8 Feb 2001 21:01:51 +0300 (MSK)


On Thu, 8 Feb 2001, Gary Perez wrote:
> When the user is prompted by Zope to login (user defined role, limited
> page access, etc.), are the username and password sent from the client
> to the Zope server in clear text or are they encrypted somehow?

   It depends on whether you use HTTP or HTTPS. On HTTP passwords go
absoluteley unencripted.

Oleg.
----
     Oleg Broytmann     http://www.zope.org/Members/phd/     phd@phd.pp.ru
           Programmers don't die, they just GOSUB without RETURN.