Re: Does anyone know how to log-off from a protected Webserver document

On Wed, 24 Feb 1999 05:02:13 GMT, bhoylma_at_uswest.com wrote:

>In article <36d1e1ad.29174844_at_news.usr.com>,
> jeff_kalchik_at_spam-me-not.mw.3com.com (Jeff Kalchik) wrote:
>> Actually, there is a solution.... the web server has to return an
>> error back to the browser indicating that the authorization has
>> failed. This will change the cached info. I know it can be forced
>> using Apache; I don't know about OAS/WAS.
>>
>
>I read that too. dougm came back saying that one can easilly circumvent this
>type of forced reauthentication by simply going back in the history list. He
>recommended staying away from this method.
>
>He 'da man, too.

[Quoted] Hmmmm..... my understanding is that after the browser has received the failed authentication, the name/password is thrown away. Returning to an earlier document would deliver the new password, not the old one.

Obviously, some tinkering is called for. Now I just need to find the time.....