Re: Authentication prompt for mbox downloads - Mailing list pgsql-www

From Magnus Hagander
Subject Re: Authentication prompt for mbox downloads
Date
Msg-id CABUevEyiUpQun8X2fQj6m3n2J_2CHisTDX0vUXFwq+JR9JdZHA@mail.gmail.com
Whole thread Raw
In response to Authentication prompt for mbox downloads  (Dave Page <dpage@pgadmin.org>)
Responses Re: Authentication prompt for mbox downloads  (Dave Page <dpage@pgadmin.org>)
List pgsql-www
On Thu, Mar 26, 2020 at 1:53 PM Dave Page <dpage@pgadmin.org> wrote:
>
> Some, maybe all of the major browsers no longer display the security realm on login prompts, which was previously
usedto inform the user of the anti-spam username and password used to protect the mailbox archives. This means that the
onlyway to get it now is either to go find it in the source code for the website, or look at the response headers in
thebrowsers developer tools. 

FWIW, Firefox still shows it as expected. There's at least one browser
out there that's not broken... But yeah, that's not enough, and it
seems the others no longer care about this problem (which they said
years ago they were going to fix, but since they haven't..)


> The attached patch adds a note to the page instead.

My feeling is that's a very prominent location (and space usage) for
something that in the end very few people use. And it also misses the
usecase of people downloading thread-as-mbox, as well as the
functionality to view raw message, which both use the same protection,
so should be equally informed.

Perhaps put it in a title attribute on the link, so it shows as a
popup? That would work in all the use cases, I think?

//Magnus



pgsql-www by date:

Previous
From: Dave Page
Date:
Subject: Authentication prompt for mbox downloads
Next
From: Dave Page
Date:
Subject: Re: Authentication prompt for mbox downloads