1

mod_auth_radius README file says:

Using static passwords & RADIUS authentication over the web is a BAD
IDEA.  Everyone can sniff the passwords, as they're sent over the net
in the clear.

If I serve the page over https, will it be secure then? Or is that not what is meant by the statement?

Karel
  • 629
  • 9
  • 16

1 Answers1

2

Yes, over https basic auth is secure. Additionally between the RADIUS server and the HTTP server the passwords are reversibly encrypted using the RADIUS shared secret.

Arran Cudbard-Bell
  • 1,514
  • 1
  • 9
  • 18