Re: Securing password between webserver & appserver.

["Ali, Saqib" <docbook.xml () gmail com>]

in that case, a pre-shared secret or PKI seems to be the only way.

Saqib
http://kawphi.blogspot.com


On Mon, Sep 7, 2009 at 1:40 AM, Chintan Oza<chintan.oza () gmail com> wrote:
> Dear Saqib,
>
> Yes the webserver will be in the middle.
>
> The password verification will be performed by the application server.
>
> We just dont want the password to be available at the webserver where
> the ssl communication ends.
>
> Chintan
>
> On Mon, Sep 7, 2009 at 1:10 PM, Ali, Saqib<docbook.xml () gmail com> wrote:
> > Chintan,
> >
> > I am not sure if I understand your question. If you are using the
> > webserver as the middleware, the authentication credentials will have
> > to pass through it one way or the other.
> >
> > Can you please provide more details as to what problem are you trying
> > to address?  Thanks
> >
> > Saqib
> > http://kawphi.blogspot.com