Vermyndax
Guest
|
Posted:
Tue Jan 11, 2005 3:39 am Post subject:
Re: exchange with RPC on HTTP without ssl |
|
|
Valentin Collado wrote:
| Quote: | It is possible to form exchange with RPC on HTTP without using SSL?
Valentin Collado
|
If you use basic authentication, no. You'll be forced to use SSL. If
you have a small network, just create a server certificate and add it to
everyone's personal stores. If you have a large network, I'd buy a
certificate.
The reason is that with basic authentication, passwords are sent over
clear text. You don't want to do that. MS doesn't want you to do it
either and they won't let you.
If you're going to try to use integrated authentication, you might want
to rethink that. You'll have trouble with it and almost every
whitepaper advises basic auth with SSL.
--JM |
|