Re: [SL] new session procedure

[Dr E. L. <el...@li...>]

Leave it be. Or follow the vapor trail to the spoon-list.

el

on 9/10/06 1:54 AM Gavin Carr said the following:

> That's not really correct. The issue is who is doing the authentication. 
> If the app does it (and uses an api to allow it swap different schemes in 
> and out), that's pluggable; if apache does it and the app just accepts 
> the results, that's external.
> 
> 'Basic HTTP Authentication' is just a particular HTTP authentication 
> method, and orthogonal to this point - either the app or apache could 
> support Basic authentication, alongside any other scheme.
> 
> But if you're planning to support external REMOTE_USER authentication,
> then that would be great.