Hi! You wrote at Tue 06 Apr 2004 17:06:
AFAIS the simplest way to to it is to ask for the proxy password when dillo starts, that is, before any query is made, probably after the splash screen is displayed.
That way, things would reach the same simplicity as in the first patch! Yes, this simplify all that mess =) I've done as you suggested.
Now, if after this patch, you want to keep on working on basic authentication, be sure to contact Madis (AFAIR he once worked on it), and I can make the CCC bindings to stop/resume/forward the querying process. Ok! Great. I'll contact him.
And, the last note on patch. It's about following lines in IO/http.c: + if ( strchr(prefs.http_proxyuser, ':') ) + { + DEBUG_MSG(5, "Storing proxy password in dillorc is insecure!\n"); + ask_proxy_passwd = FALSE; + HTTP_Proxy_Auth_base64 = a_Misc_encode_base64(prefs.http_proxyuser); + } It allows user to store in config file not only proxy user name, but pair "user:password" as well. I've done it's mainly for convenience, but of cource we can remove it from patch.
Hmmm, this is one I'm not yet sure of. On one hand, it is very handy not to have to enter the password every time, and on the other, stealing the proxy's password becomes quite simple (for instance, a bathroom break and it's gone! ;).
[minutes thinking...]
It's not a thing I'd recommend. Now, as Dillo project is explicitly concerned about security, it can't do otherwise. Perhaps you may leave that portion of code commented out, so the responsibility is left to the one that decides to enable it.
Ok, I just commented it out. Here attached pre2 :) patch. What about hiding symbols, when entering password? (i.e, replacing visible characters by asterisk symbol). Maybe we just have to add additional parameter in a_Interface_make_dialog(..), like "gboolean entry_hidden" or smth? Or implement a new dialog_window type specially for login/password asking? It will be useful for basic authentication stuff. Regards! -- Ivan Daniluk, software developer, Ukrainian Computer Labs, Kiev, Ukraine mailto:Ivan.Daniluk@ucl.com.ua