New answers tagged

2

I think that @Pedro has a very good and well balanced answer to your question. However, since I generally agree with your local experts, I think it is good to have some further context on why you might want to make this change. As Pedro mentioned, the issue is mixing implementation layers, and limited control becomes a real problem when you aren't ...


4

The advantage of authenticating at the application is having this done independently of the OS and web server, you are not mixing your implementation layers (i.e. the application's authentication and access controls don't rely on information passed on from another piece of software). Generally the advice of not authenticating at the web server level is a ...


Top 50 recent answers are included