[imp] Windows XP caches login credentials.

[Joe Kellner]

>From the apache docs:

How do I log out?
Since browsers first started implementing basic authentication, website
administrators have wanted to know how to let the user log out. Since the
browser caches the username and password with the authentication realm, as
described earlier in this tutorial, this is not a function of the server
configuration, but is a question of getting the browser to forget the
credential information, so that the next time the resource is requested, the
username and password must be supplied again. There are numerous situations
in which this is desirable, such as when using a browser in a public
location, and not wishing to leave the browser logged in, so that the next
person can get into your bank account.

However, although this is perhaps the most frequently asked question about
basic authentication, thus far none of the major browser manufacturers have
seen this as being a desirable feature to put into their products.

Consequently, the answer to this question is, you can't. Sorry.





-Joe










----- Original Message -----
From: "Christopher Crowley" <ccrowley@tulane.edu>
To: <imp@lists.horde.org>
Sent: Monday, July 15, 2002 5:44 PM
Subject: [imp] Windows XP caches login credentials.


> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I have received a number of reports that the password autocomplete
> feature for Windows XP is logging people in to IMP automatically.
> How can I set the data in this form to be protected from caching by a
> browser? Would autocomplete="off"  in the <form > take care of this?
>
> I think that you might consider this an option to be set in the
> horde/imp configuration.
>
> Have others experienced this difficulty?
>
> Christopher Crowley
> TIS Network Services
> Tulane University
> ccrowley@tulane.edu
> 504.314.2535
> PGP Key ID: 0x7CF18FDB
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGPfreeware 6.5.8 for non-commercial use <http://www.pgp.com>
>
> iQA/AwUBPTNCKM0q7cR88Y/bEQK4aACgv/9gva0dskRPqUWDcGcbcRNRTcsAn0Pt
> g364Y1gaB3ugQAyT+5tDhggv
> =1cm4
> -----END PGP SIGNATURE-----
>
>
>
> --
> IMP mailing list
> Frequently Asked Questions: http://horde.org/faq/
> To unsubscribe, mail: imp-unsubscribe@lists.horde.org
>