[Owncloud] Webdav Basic Authentication

Matthias suleimann at gmx.at
Thu Sep 12 08:24:42 UTC 2013


Dear Group,

I am not a webdav expert but I read on a microsoft website, that 
microsoft disabled Basic Authentication for windows due to security 
reasons of the Basic Authentication standard. I also read "The most 
serious flaw in Basic authentication is that it results in the 
essentially cleartext transmission of the user's password over the 
physical network." on this website:
http://www.webdav.org/specs/rfc2617.html#rfc.section.4.1

If I get this right, it is not a good idea that owncloud only uses this 
type of Authentication standard?

Matthias



More information about the Owncloud mailing list