CouchDB Authentication

I've read a lot of things about authentication in CouchDB, especially regarding the Cookie Authentication. I'm still making some tests and all seems working well, for instance with this command :

curl -vX POST $HOST/_session -H 'application/x-www-form-urlencoded' -d 'name=foo&password=bar'

I get a Cookie that I can use. But my point is, anytime I see think kind of sample on the Web, the username and password are always sent in plain text.

I'm really new to security but what's the interest of the Cookie Auth method if I first have to send my credentials in clear ?

Is there a way to send at least the password hashed ? Что-то вроде этого IDK:

curl -vX POST $ HOST / _session -H 'application / x-www-form-urlencoded' -d 'name = foo & hashed_password = hashed_bar'

Ура

Арно

7
задан Arnaud 23 February 2011 в 14:07
поделиться