33 votes
proxy authentication SSL-encrypted
Please make the proxy authentication encrypted if the client does not support eDirectory SSO. Actually user and password are sent in human-readable cleartext.
Same thing for the transparent proxy with authentication. The login form is provided via http... Why not https?
Sindbad Sailor
pimp up the captive portal
Ken Watts
A non-encrypted proxy authentication is clearly unacceptable by any security standard. It looks like the eDirectory SSO could fallback to the transparent proxy auth page, rather than using basic http auth. The proxy auth page also needs to be SSL encypted using a generated cert signed by a client trusted CA.
Stefan Baumgart
An alternatice mechanism was the support of digest authentication. Its not as secure as SSL but it is a first step.
Sindbad Sailor
yes we can - encrypt everything
Eric Severance
I'd like it if all HTTP/S proxy traffic were encrypted. It'd be just one more layer of defense for a wireless network.
Andreas Kronawitter
Cleartext Password are very secure, isn't it ?
I wish a https splace screen to auth. proxy.