Jump to content

Apache User Authentication and SSL


sKunKbad

Recommended Posts

I'm curious if using Apache user authentication (.htpasswd) with either shared or dedicated SSL is considered ~100% safe from hacking. I have a folder and associated files of a website that I need to protect. I have already used .htpasswd, which is very easy, and have used a shared SSL certificate, but have never used a dedicated certificate.

Link to comment
https://forums.phpfreaks.com/topic/91344-apache-user-authentication-and-ssl/
Share on other sites

from what ive read and experienced, SSL encrypts all information passed between the client and server, therefor is as hacker safe as say... paypal or other online banking, im sure they use ssl certificates themselves.

 

(correct me if im wrong)

I'm curious if using Apache user authentication (.htpasswd) with either shared or dedicated SSL is considered ~100% safe from hacking. I have a folder and associated files of a website that I need to protect. I have already used .htpasswd, which is very easy, and have used a shared SSL certificate, but have never used a dedicated certificate.

Well, ssl prevents the password been sniffed via network traffic. A shared and dedicated ssl cert is pretty much the same when it comes to security IMO.

If the .htpasswd was exposed, then it might be possible to crack the password.

Apart from that...if apache is fully patched, it should be near 100% safe.

 

-steve

 

Archived

This topic is now archived and is closed to further replies.

×
×
  • Create New...

Important Information

We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.