[mythtv-users] Apache authentication problem with mythweb

Jim Stichnoth stichnot at gmail.com
Thu Sep 19 19:40:01 UTC 2013


On Thu, Sep 19, 2013 at 10:07 AM, Gary Buhrmaster <gary.buhrmaster at gmail.com
> wrote:

> There were various anecdotal reports that digest authentication
> was broken in interesting ways on Android before 4.0.3.  I would
> presume you (nominally) have 4.3 (or better :-), but if not, there
> you are.  The reports indicated that proxies were often involved,
> and many mobile operators use proxies.
>
> You might consider simplifying and just use basic auth with
> TLS for external access to your home server since you are
> still vulnerable to MITM attacks when using digest.
>
> Thanks Gary!  Changing from Digest to Basic authentication seems to make
it completely reliable for everything I've tried so far.  BTW, I do indeed
have 4.3 - no KitKat yet. :)

Jim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.mythtv.org/pipermail/mythtv-users/attachments/20130919/f97ec94c/attachment.html>


More information about the mythtv-users mailing list