internetarchive / internetarchive/heritrix3
Provide an HTTP interface, RM digest auth enforcement
- Dominant language
- Java
- Stars
- 3.3k
- Forks
- 793
- Avg merge
- 1d 8h
- Merged PRs (30d)
- 8
Description
Please provide an http interface. Enforcing digest auth in the way it is done atm means restricting to one user and one password — which is not very secure at all, beside Apache claiming digest being even less secure than basic auth[^1]. Running heritrix behind a proxy providing basic auth by itself and offloading the TLS makes this enforcement just a waste of computation power and developer time.
Thank you!
[^1]: This module implements HTTP Digest Authentication ([RFC2617](http://www.faqs.org/rfcs/rfc2617.html)), and provides an alternative to [mod_auth_basic](https://httpd.apache.org/docs/2.4/mod/mod_auth_basic.html) where the password is not transmitted as cleartext. However, this does not lead to a significant security advantage over basic authentication. On the other hand, the password storage on the server is much less secure with digest authentication than with basic authentication. Therefore, using basic auth and encrypting the whole connection using [mod_ssl](https://httpd.apache.org/docs/2.4/mod/mod_ssl.html) is a much better alternative. [src](https://httpd.apache.org/docs/2.4/mod/mod_auth_digest.html)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.