reger 0c754dd794 implemented DIGEST authentication, which is for remote login more secure ... as BASIC were pwd is transmitted near clear text (B64enc). This has some implication as RFC 2617 requires and recommends a password hash MD5(user:realm:pwd) for DIGEST. !!! before activating DIGEST you have to reassign all passwords !!! to allow new calculation of the hash - default authentication is still BASIC - configuration at this time only manually in (DATA/settings) or defaults/web.xml (<auth-method> - the realmname is in defaults/yacy.init adminRealm=YaCy-AdminUI - fyi: the realmname is shown on login screen - changing the realm name invalidates all passwords - but for security you are encouraged to do so (as localhostadmin) - implemented to support both, old hashes for BASIC and new hashes for BASIC and DIGEST - to differentiate old / new hash the in Jetty used hash-prefix "MD5:" is used for new pwd-hashes ( "MD5:hash" )		2014-01-17 00:02:23 +01:00
..
GSAsearchServlet.java
SolrServlet.java	better solution for prev. commit with MultiMapSolrParams.getFieldInt not returning default parameter	2014-01-06 18:19:54 +01:00
YaCyDefaultServlet.java	implemented DIGEST authentication, which is for remote login more secure	2014-01-17 00:02:23 +01:00
YaCyProxyServlet.java	fix use of url proxy access pattern	2014-01-08 08:12:56 +01:00