Synchronet v3.21e-Win32 (install) has been released (Mar-2026).

You can donate to the Synchronet project using PayPal.

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
howto:hardening [2014/07/25 02:17] – Remove pointless rambling. deucehowto:hardening [2014/07/25 02:29] (current) – Synchronet supports Digest auth now, you don't need to disable the server to disable Basic auth deuce
Line 67: Line 67:
     * HTTP with basic auth is not a secure method of transferring information - at any given time it's possible HTTP, with basic auth sessions, could be intercepted     * HTTP with basic auth is not a secure method of transferring information - at any given time it's possible HTTP, with basic auth sessions, could be intercepted
       * Change: Configuration Value       * Change: Configuration Value
-      * **Disable Web Server on Win32**: From the //Synchronet Control Panel//, Select **Web->Configure** from the top menu, on the **General** tab. UnCheck **Auto Startup**, then click **OK**.+        * In the .ini file, in the Web section, add (or modify) the Authorization line to read ''Authorization=Digest'' 
 +        * Ensure that any webctrl.ini files don't override this value.
  
   * Don't enable NNTP   * Don't enable NNTP

Trace: • Hardening the Synchronet Servers