Security: Download files with Window Authentication

Dear all,

The pdf files can be downloaded by the domain user. The files has already
linked with the Windows authentication and it is required the SSL. After the
domain user clicked the link (https://www.mysite.com/xxx.pdf). , it is
required the user to input the domain and user. It works.

My question is:

1. is it secured to download the files through the SSL and window
authentication?

2. When the domain user click the link (https://www.mysite.com/xxx.pdf),
the username and password is required to input in a pop-up window. These
sensitive information (Login and Password) is protected by SSL or no securtiy
to protect?

Thank you very much.
Best Regards,
Louis

In answer to question (b) - yes the credentials are encrypted via SSL

In answer to (a) - it's only as secure as the user's username/password. If
the user has a easy-to-guess password, then anyone can easily guess it.

Cheers
Ken


"Louis" <Louis RemoveThis @discussions.microsoft.com> wrote in message
news:0611CFA4-59C4-4BA0-9CE8-7168B2165A3A@microsoft.com...
: Dear all,
:
: The pdf files can be downloaded by the domain user. The files has already
: linked with the Windows authentication and it is required the SSL. After
the
: domain user clicked the link (https://www.mysite.com/xxx.pdf). , it is
: required the user to input the domain and user. It works.
:
: My question is:
:
: 1. is it secured to download the files through the SSL and window
: authentication?
:
: 2. When the domain user click the link (https://www.mysite.com/xxx.pdf),
: the username and password is required to input in a pop-up window. These
: sensitive information (Login and Password) is protected by SSL or no
securtiy
: to protect?
:
: Thank you very much.
: Best Regards,
: Louis
:
:
:
:
:
: