Dumb basic authentication and SSL question

I have a web directory protected by SSL and basic authentication. It works
fine. The user is prompted to authenticate before the page is displayed.
It bothers me that there is no SSL padlock shown on the page during the
basic authentication. I am guessing the logon is encrypted anyway, but I'd
just like to check.
W2K3 and IE6.
Thanks,
Anthony

Re: Dumb basic authentication and SSL question

Hi,

Yes, the credentials are encrypted. The SSL handshake occurs before any data
is transmitted at the HTTP layer. It's easy to verify yourself using a tool
like Ethereal (www.ethereal.com) or Microsoft's NetMon (Network Monitor)

Cheers
Ken


"Anthony Yates" wrote in message
news:uOCNdTdeGHA.1272@TK2MSFTNGP03.phx.gbl...
>I have a web directory protected by SSL and basic authentication. It works
>fine. The user is prompted to authenticate before the page is displayed.
> It bothers me that there is no SSL padlock shown on the page during the
> basic authentication. I am guessing the logon is encrypted anyway, but I'd
> just like to check.
> W2K3 and IE6.
> Thanks,
> Anthony
>

Re: Dumb basic authentication and SSL question

Thanks very much, job done
Anthony

"Ken Schaefer" wrote in message
news:ewWGKOkeGHA.4892@TK2MSFTNGP02.phx.gbl...
> Hi,
>
> Yes, the credentials are encrypted. The SSL handshake occurs before any
> data is transmitted at the HTTP layer. It's easy to verify yourself using
> a tool like Ethereal (www.ethereal.com) or Microsoft's NetMon (Network
> Monitor)
>
> Cheers
> Ken
>
>
> "Anthony Yates" wrote in message
> news:uOCNdTdeGHA.1272@TK2MSFTNGP03.phx.gbl...
>>I have a web directory protected by SSL and basic authentication. It works
>>fine. The user is prompted to authenticate before the page is displayed.
>> It bothers me that there is no SSL padlock shown on the page during the
>> basic authentication. I am guessing the logon is encrypted anyway, but
>> I'd just like to check.
>> W2K3 and IE6.
>> Thanks,
>> Anthony
>>
>
>