login - logging-in technique similar to a router? -


i visited various websites lately , use logging-in techniques linksys or belkin home routers use. small window box opens asking username , password. after logging-in normal. know how done? if so, why isn't regular technique used (i.e. log-in form in page similar gmail, yahoo or websites)?

i believe referring http's basic authentification, or marginally more secure version digest access authentification

there's few reasons it's not used often:

  1. it doesn't add security on form-based login systems, , uses out-of date technology (the md5 digest used has been shown have number of weaknesses making inappropriate security purposes). basic auth can send passwords in plaintext in query, isn't ever encrypted, under https.
  2. it can't styled match website, , can't customised (i.e. can't add things "forgotten password?" link can form.
  3. it doesn't work accessibility software such screen-readers, whereas form can written always will.

there other considerations too, these off top of head.


Comments

Popular posts from this blog

assembly - 8086 TASM: Illegal Indexing Mode -

Java, LWJGL, OpenGL 1.1, decoding BufferedImage to Bytebuffer and binding to OpenGL across classes -

javascript - addthis share facebook and google+ url -