Re: authentication on NT PDC

Martin Brooks wrote:

> Passwords are sent to Squid in plain text format. Soemone sniffing your
> local network could potentially intercept this. As I understand it, the
> password is not cached by Squid itself but is presented each time by the
> browser. This adds up to an increase in the amount of authenication your
> PDC(s)/BDC(s) will be doing.

Well, the password cached inside Squid (but not on disk) for the
duration of authenticate_ttl, to not overload the backend system with
password validations.

--
Henrik Nordstrom
Squid hacker