CS305: Web Development

6.3: HTTP Authentication

• 6.3.1: Usernames and Passwords

  • Binghamton University: Dick Steflik's "Web Security" URL

    Review this presentation, paying specific attention to slides 2 and 3.
    

• 6.3.2: The Base64 Algorithm

  • OWASP: "Testing for Brute Force: Discovery Authentication Methods" URL

    Read this article.
    

• 6.3.3: Advantages and Disadvantage of Basic Access Authentication

  • Paul Ruben's "Watch for Authentication Bypass Vulnerabilities" URL

    Read this article.