Secure Http Authentication

[section31]

Not that I ever use the basic http authentication...but in case I were to ever use it. Is there anything easy I can do to prevent from brute force attacks. The only thing I can think of is by using either a flat file or mysql database to keep attempts with ips/times.

If fact i use a mysql database for one of my sites for login attempts.

 

Is there any other way?

[borfast]

There may be some way of doing it directly with Apache or some authentication module for it. I don't know any but it's possible, I guess.

 

Otherwise, I'd do it like you described, with a PHP script, for example

[section31]

so, I'm guessing tch doesn't protect cpanel from brute force attacks.

[borfast]

I don't know about that, someone from the Divine Powers division would have to answer that.

[jandafields]

so, I'm guessing tch doesn't protect cpanel from brute force attacks.

I think it would be pretty hard to successfully brute-force an account, since many of the usernames are random characters.

 

I would think that specifics of the security measures used in TCH (or any webserver) are unpublished because of security.