[Xitami] Password problems

Paul Reid xitami@lists.xitami.org
Fri, 22 Jun 2001 06:52:25 -0400


>I have had a look at Paul Reid's site which works fine with multiple RA 
>files and password. 

> One thing you might want to consider if it's causing you a lot of pain
is "security through obscurity" -- put the RA files in a non-password
protected directory, and just only link to them from your hidden page.

I posted to Don off-list; I didn't want to tell everybody the details of my
"security through obscurity" trick.

But just as you say: the HTML file and a RAM file containing the URL(s) of the
media file(s) are in an Xitami-password directory; the actual media files are
in a "public" but not browsable folder (and a different machine and server,
but that should not matter). 

The security risk is that someone might capture the RAM file; or the URL in
standalone RealPlayer, and give it to unauthorized persons. 

> The difference is that my RA files are embedded which seems to cause the problem in IE. 

Don's page with embedded player is slick, I like it; but I had little luck
with embedding more than one player per page. It is supposed to work, I've
seen it work (without passwording), but it all seems very flaky to me. I think
it is a low priority at Real.Inc. 

 -PRR