The password verification will be performed by the application server.
We just dont want the password to be available at the webserver where
the ssl communication ends.
Chintan
On Mon, Sep 7, 2009 at 1:10 PM, Ali, Saqib<docbook.xml (at) gmail (dot) com [email concealed]> wrote:
> Chintan,
>
> I am not sure if I understand your question. If you are using the
> webserver as the middleware, the authentication credentials will have
> to pass through it one way or the other.
>
> Can you please provide more details as to what problem are you trying
> to address? Thanks
>
> Saqib
> http://kawphi.blogspot.com
>
Yes the webserver will be in the middle.
The password verification will be performed by the application server.
We just dont want the password to be available at the webserver where
the ssl communication ends.
Chintan
On Mon, Sep 7, 2009 at 1:10 PM, Ali, Saqib<docbook.xml (at) gmail (dot) com [email concealed]> wrote:
> Chintan,
>
> I am not sure if I understand your question. If you are using the
> webserver as the middleware, the authentication credentials will have
> to pass through it one way or the other.
>
> Can you please provide more details as to what problem are you trying
> to address? Thanks
>
> Saqib
> http://kawphi.blogspot.com
>
[ reply ]