[10773] in www-talk@info.cern.ch
Browser authentication
daemon@ATHENA.MIT.EDU (grahameg@kestral.com.au)
Thu Apr 24 04:04:02 1997
From: grahameg@kestral.com.au
To: www-talk@w3.org
Date: Thu, 24 Apr 1997 15:49:45 +0800
Resent-From: www-talk@w3.org
Is there anyway for a server to clear the authentication field carried in
the HTTP header?
We wish to time the authentications out, but returning an HTTP 401
Authorisation failed
merely resuts on the browser giving the user the opportunity to change
their password.
If they don't, the browsers re-usethe old password Is there anyway to stop
them from
doing this?
Thanks,
Grahame
