[Owncloud] Webdav Basic Authentication

Mark Ziegler mark.ziegler at rakekniven.de
Thu Sep 12 08:27:41 UTC 2013


Am 12.09.2013 10:24, schrieb Matthias:
> Dear Group,
>
> I am not a webdav expert but I read on a microsoft website, that 
> microsoft disabled Basic Authentication for windows due to security 
> reasons of the Basic Authentication standard. I also read "The most 
> serious flaw in Basic authentication is that it results in the 
> essentially cleartext transmission of the user's password over the 
> physical network." on this website:
> http://www.webdav.org/specs/rfc2617.html#rfc.section.4.1
>
> If I get this right, it is not a good idea that owncloud only uses 
> this type of Authentication standard?
>
That's why we recommend SSL for your webserver.



More information about the Owncloud mailing list