OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: MS to stop allowing passwords in URLs

From: 3APA3A (3APA3ASECURITY.NNOV.RU)
Date: Tue Feb 03 2004 - 11:26:30 CST


Dear McAllister, Andrew,

--Thursday, January 29, 2004, 1:54:00 AM, you wrote to bugtraqsecurityfocus.com:

MA> Anyone have any comments regarding legitimate uses of this syntax and
MA> Microsoft removing it from their browser? (and presumably the OS since
MA> the browser IS the OS).

ftp://user:passsite

is _only_ way to authenticate FTP through HTTP proxy (if not given,
proxy always use anonymous).

--
~/ZARAZA
Всегда будем рады послушать ваше чириканье (Твен)