Update xmlConfigFile.md

- Corrected smart quotes
- Fixed format of header
pull/303/head
CorwinNewall 2019-02-11 14:49:11 +13:00 committed by GitHub
parent f4c0002c93
commit 13bd392b6c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions

View File

@ -164,9 +164,9 @@ For servers requiring authentication some parameters must be specified depending
* `none`: default, must not be specified
* `sspi`: Microsoft [authentication](https://en.wikipedia.org/wiki/Security_Support_Provider_Interface) including Kerberos, NTLM etc.
* `basic`: Basic authentication, sub-parameters:
* `user=“UserName”`
* `password=“Passw0rd”`
* `unsecureAuth=“true”: default=“false"`
* `user="UserName"`
* `password="Passw0rd"`
* `unsecureAuth="true": default="false"`
The parameter “unsecureAuth” is only effective when the transfer protocol is HTTP - unencrypted data transfer. This is a security vulnerability because the credentials are send in clear text! For a SSPI authentication this is not relevant because the authentication tokens are encrypted.