|
You really don't want your system passwords to be available over an http connection, so I would only suggest you do this if you are only serving pages to localhost. The login process puts delays into each unsuccessful password attempt making brute force attacks on your passwords prohibitively long. HTTP authentication doesn't have the same safeguards.
Last edited by forrestt; 11-28-2007 at 10:47 AM.
|