[计算机软件及应用]2_3_1 Declarative Web Application Security.pptVIP

Example: Step 8 (Results) Attempt to access http://host/hotdotcom/servlet/Anything Form-Based vs. BASICAuthentication Advantages of form-based Consistent look and feel Fits model users expect from ecommerce sites Disadvantage of form-based Can fail if server is using URL rewriting for session tracking. Can fail if browser has cookies disabled. Advantages of BASIC Doesnt rely on session tracking Easier when you are doing it yourself (programmatic) Disadvantage of BASIC Small popup dialog box seems less familiar to most users Other auth-method options CLIENT-CERT (X 509 certificates) DIGEST