[mythtv-users] Apache authentication problem with mythweb
Jim Stichnoth
stichnot at gmail.com
Thu Sep 19 19:40:01 UTC 2013
On Thu, Sep 19, 2013 at 10:07 AM, Gary Buhrmaster <gary.buhrmaster at gmail.com
> wrote:
> There were various anecdotal reports that digest authentication
> was broken in interesting ways on Android before 4.0.3. I would
> presume you (nominally) have 4.3 (or better :-), but if not, there
> you are. The reports indicated that proxies were often involved,
> and many mobile operators use proxies.
>
> You might consider simplifying and just use basic auth with
> TLS for external access to your home server since you are
> still vulnerable to MITM attacks when using digest.
>
> Thanks Gary! Changing from Digest to Basic authentication seems to make
it completely reliable for everything I've tried so far. BTW, I do indeed
have 4.3 - no KitKat yet. :)
Jim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.mythtv.org/pipermail/mythtv-users/attachments/20130919/f97ec94c/attachment.html>
More information about the mythtv-users
mailing list