News for hackers. Stuff that matters.

A comment on Password protect a static HTML page. Parent comment

Re:Password protect a static HTML page by hosteur on Saturday February 18, 2023 @01:11PM (#34849335)
Wow I like that. So simple and elegant. Could be combined with a username to produce unique urls per user.
[ Parent | on HN ]
Re:Password protect a static HTML page by pyrolistical on Saturday February 18, 2023 @01:14PM (#34849370)
A miss configured http server that allows directory listing would compromise everything.

Also now all intermediate things that have access to the hashed url would suddenly have access to a secure piece of information.

Don’t be clever with security

[ Parent | on HN ]
Re:Password protect a static HTML page by cozzyd on Saturday February 18, 2023 @04:16PM (#34851176)
You can always put an index.html to prevent that mistake.
[ Parent | on HN ]