BA vs. OAuth, SAML, etc

Posted on 2014-08-04
Last Modified: 2014-08-04
I read from an expert on another thread that Basic Authrtication will send the password directly to the server on the wire.

However, OAuth and SAML or Kerberos will use third party servers to verify pw's but not transmit the pw on the wire

My Question:  How do the more complex security servers avoid transmitting a pw on the wire,

Did I read the post incorrectly?  (Is the pw sent to the third party verification server, but not the http server ?

Question by:Anthony Lucia
    1 Comment
    LVL 23

    Accepted Solution

    More comples security servers avoid transmitting a pw on the wire in the clear by either encrypting it or by simply USING it.   For example, Kerberos will send the client information that does not contain the pw, but is encrypted USING the pw, so the client is unable to use the information without decrypting it .... for which the correct pw is necessary.

    Featured Post

    6 Surprising Benefits of Threat Intelligence

    All sorts of threat intelligence is available on the web. Intelligence you can learn from, and use to anticipate and prepare for future attacks.

    Join & Write a Comment

    Java Flight Recorder and Java Mission Control together create a complete tool chain to continuously collect low level and detailed runtime information enabling after-the-fact incident analysis. Java Flight Recorder is a profiling and event collectio…
    To properly understand GitHub, let’s divide it into two words ‘Git’ and ‘Hub’. Git is basically a ‘Distribution Version Control’ (DVC) and ‘Source Code Management’ (SCM) system widely used by software programmers while Hub means the efficient centre…
    Viewers learn about the third conditional statement “else if” and use it in an example program. Then additional information about conditional statements is provided, covering the topic thoroughly. Viewers learn about the third conditional statement …
    Viewers learn about the “for” loop and how it works in Java. By comparing it to the while loop learned before, viewers can make the transition easily. You will learn about the formatting of the for loop as we write a program that prints even numbers…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    19 Experts available now in Live!

    Get 1:1 Help Now