Talk:Server.pl

Here are some directives Apache uses when it deals with IE clients:

SetEnvIf User-Agent ".*MSIE.*" \

nokeepalive ssl-unclean-shutdown \
downgrade-1.0 force-response-1.0

Might give a clue to it's little quirks.

--Rob 09:44, 16 Feb 2006 (NZDT)

Currently HTTP authentication is just base64 encoded username:password which is basically just plain text, so the password can easily be discovered.

• Using MD5 with HTTP Authentication
• RFC2617
• MS ActiveDirectory, but lots of MD5 header info