RE: HTTP Authentication & Source IP Address

HTTP requests from multiple individuals can come from a single ip address when being routed through a firewall or proxy..

And HTTP requests from one individual can come from different ip addresses when connecting through a proxy network such as AOL's.

http://webmaster.info.aol.com/proxyinfo.html

If your application is targeted for a wide audience of users then make sure you don't assume too much about the relationship between the originating IP address and the individual's session.

> -----Original Message-----
> From: James Wilkinson [mailto:james.wilkinson@jwit.co.uk]
> Sent: Saturday, November 30, 2002 8:14 AM
> To: Security Focus Forum
> Subject: Re: HTTP Authentication & Source IP Address
>
>
> Hi,
>
> In the recent discussion on HTTP Authentification, it was said
Received on Sat Nov 30 12:18:40 2002