On 2017-03-17 07:48, Per Jessen wrote:
Carlos E. R. wrote:
On 2017-03-17 04:59, David C. Rankin wrote:
On 03/16/2017 07:24 AM, Carlos E. R. wrote:
I suppose this is with https? Or is that a separate thing?
Yes, this is with https, I enforce it just prior to the authentication, e.g.:
Makes sense. I have to explore that one day. You also need a certificate.
FYI, you really only need the certiticate if you are using basic authentication (clear text) or if you want the entire exchange encrypted. For authentication, you can use apache's digest authentication which does not transmit your credentials in clear text.
Ah! Good to know.
Otherwise free certificates are available at http://letsencrypt.org
Good to know, too, thanks. -- Cheers / Saludos, Carlos E. R. (from 42.2 x86_64 "Malachite" (Minas Tirith))