Re: Re: HTTP REFERER not set in Internet Explorer

[Saqib Ali <docbook.xml () gmail com>]

Hi Mike,

> One twist to cookies that I use is to store a public key of the user. They key is used to encode their password and 
> send a digest. In this way, passwords are never sent (even over an SSL connection). I also never store passwords 
> (only digests).

Do all of your users have a public/private key pair? If so, are the
public keys stored in a central repository?
Are you requiring each client to a have digital certifcate? I can not
do that for my application. Most of the users who are connecting to my
application do not have a digital cert.

--
In Peace,
Saqib Ali
http://www.xml-dev.com/blog/
Consensus is good, but informed dictatorship is better.