Re: authenticate_ttl not working?

Dave J Woolley wrote:

> Any such expiry can only be implemented by the browser.

Only partially true.

The proxy can cause the browser to show a logon dialog after a given
period of time. Problem is that it cannot distinguish if the user really
reenters the password or if they simply cancel the login dialog and
retries the request with their browser cached credentials. Some versions
of the browsers flush the authentication credentials when this happen,
and then the user is trulu required to reauthenticate, but not all
browsers do this.

--
Henrik Nordstrom
Spare time Squid hacker