什么是 Base64 明文用户名和密码?
最近我在一篇基础认证文章中看到了这个词。网络上的 Base64 明文用户名和密码意味着什么?
谢谢
Recently I came across this word in a basic authentication article. What it meant by base64 clear text usrname and password on the network?
Thanks
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(5)
在 HTTP 基本身份验证中,“密码:用户名”以 Base64 编码。由于它没有加密,所以它是明文的。
下面是一个授权标头示例,
其中
dXNlcm5hbWU6cGFzc3dvcmQ=
是 Base64 编码的"username:password"
(字面意思)。In HTTP Basic authentication, the "password:username" is encoded in Base64. Since it's not encrypted, it's cleartext.
Here is a sample Authorization header,
Where
dXNlcm5hbWU6cGFzc3dvcmQ=
is Base64-encoded"username:password"
(literally).这意味着使用 Base 64 对用户名和密码进行编码。结果看起来不太像您的用户名和密码,但很容易反转操作以获取纯文本。
有关 Base 64 编码的详细信息,请参阅此处
http://en.wikipedia.org/wiki/Base64
例如,以 Base 64 编码的字符串
password
为cGFzc3dvcmQ=
此在线工具可以为您编码/解码 Base 64 http://www.motobit.com/util/base64-decoder-encoder.asp
It means encoding the username and password using base 64. The result won't look too much like your username and password but it's pretty easy to reverse the operation to get the plain text.
See here for details on base 64 encoding
http://en.wikipedia.org/wiki/Base64
For example the string
password
encoded in base 64 iscGFzc3dvcmQ=
This online tool can encode/decode base 64 for you http://www.motobit.com/util/base64-decoder-encoder.asp
Base 64 编码(维基百科文章) 变成“
这是我的密码。
” 成:它很容易识别并且完全可逆,因此它完全不安全。
Base 64 encoding (Wikipedia article) turns "
This is my password.
" into:It's easily recognizable and entirely reversible, so its entirely insecure.
这意味着用户名和密码未加密(即明文)。文本只是用于传输的 Base 64 编码,并且可以轻松解码。
This means that the username and password is not encrypted (ie clear text) The text is just base 64 encoded for transporting and can easily be decoded.
Base64 是一种通过连接(或文件)传送二进制数据的方法,它限制了允许包含的字符。例如,电子邮件附件以 Base64 进行编码,因为电子邮件协议仅允许电子邮件中包含纯文本。
有关更多信息,请参阅维基百科页面 http://en.wikipedia.org/wiki/Base64
Base64 is a way to deliver binary data through a connection (or file) that limits what characters are allowed to be included. For example, e-mail attachments are encoded in base64 because the e-mail protocol only allows for plain text in an e-mail message.
See the wikipedia page for more http://en.wikipedia.org/wiki/Base64