8
Windows authentication (SPNEGO / KERBEROS)
Source: Kong/insomnia#4011 · opened by @brunogenovese
Following an old Insomnia thread and looking at the list of supported authentication methods I get the impression that Insomnia does not support windows authentication (even though it does support the obsolete and security-flawed NTLM protocol). I strongly recommend adding SPNEGO / KERBEROS (or whatever is the *current* windows authentication standard) support. Reasons: • Pretty much all modern browsers support SPNEGO authentication, thus Insomnia should support it too. • NTLM (its predecessor) is obsolete due to security concerns. I am not positive but I believe Windows 10 no longer supports NTLM. • Modern security expectations are that passwords no longer be stored in files, not even encrypted. Thus where applications could before use their own service username/password stored in a properties file to access certain resources, that is no longer acceptable. Windows authentication is thus the ideal and most secure way to access a REST service when ca…
No pledges yet. Be the first to back this.
No comments yet.