[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: URL binding.



At 09:36 AM 11/3/00 -0800, Stewart, Jeffrey E wrote:
>RFC2255 references the ability to bind using the "bindname" extension, but
>it does not reference how to pass a password.

Because you shouldn't pass a password around in a URL.
If a bindname is present, the client should prompt for
the password when needed.  Of course, the client should
not use simple bind unless adequate security protections
are in place.

Kurt