internetarchive / internetarchive/heritrix3

Provide an HTTP interface, RM digest auth enforcement

Open
#641 1 comment 0 reactions 0 assignees View on GitHub
feature request pull request welcome
Dominant language
Java
Stars
3.3k
Forks
793
Avg merge
1d 8h
Merged PRs (30d)
8

Description

Please provide an http interface. Enforcing digest auth in the way it is done atm means restricting to one user and one password — which is not very secure at all, beside Apache claiming digest being even less secure than basic auth[^1]. Running heritrix behind a proxy providing basic auth by itself and offloading the TLS makes this enforcement just a waste of computation power and developer time.

Thank you!

[^1]: This module implements HTTP Digest Authentication ([RFC2617](http://www.faqs.org/rfcs/rfc2617.html)), and provides an alternative to [mod_auth_basic](https://httpd.apache.org/docs/2.4/mod/mod_auth_basic.html) where the password is not transmitted as cleartext. However, this does not lead to a significant security advantage over basic authentication. On the other hand, the password storage on the server is much less secure with digest authentication than with basic authentication. Therefore, using basic auth and encrypting the whole connection using [mod_ssl](https://httpd.apache.org/docs/2.4/mod/mod_ssl.html) is a much better alternative. [src](https://httpd.apache.org/docs/2.4/mod/mod_auth_digest.html)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.