Say, for example, a user has set up an htaccess authenticated directory within their home space.
https;//www.example.com/~someuser/secure/If the user chooses to use Kerberos authentication as the AuthType, then anyone accessing the page from an HTTP connection should get a custom error page saying something like:
The page you are attempting to retrieve is no longer accessible via HTTP. The new URL is https;//www.example.com/~someuser/secure/ . Please update your bookmarks.
It's not only user space that will be affected here. Any directory using Kerberos as an authentication mechanism must only be accessible via HTTPS and get that error page otherwise. Basic or Digest authentication are still fair game either way (though if there was no other way than to restrict them as well to HTTPS it wouldn't be a huge issue)
--------------------------------------------------------------------- The official User-To-User support forum of the Apache HTTP Server Project. See <URL:http://httpd.apache.org/userslist.html> for more info. To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx " from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx
|