1

How common is it for people to enable Basic authentication with Exchange Web Services?

I am looking to connect to Exchange Server from an app running on Windows Phone 7 which only supports Basic authentication.

The default configuration of an Exchange installation has Basic authentication disabled for the EWS virtual directory.

Do admins regularly enable Basic authentication or is it something that they will only do if they really have to?

Ola Ström
  • 177
  • 1
  • 1
  • 6
Gavin
  • 11
  • 2

1 Answers1

0

Generally, Basic is enough if you using SSL. Encryption over Encryption. Don't see a reason for it.

Vick Vega
  • 2,398
  • 16
  • 22
  • Just to elaborate, Basic sends passwords in plaintext, which is why it's typically disabled, and a security risk unless you have encryption between the device and computer (SSL, etc.). – Theo Apr 11 '11 at 02:56
  • As much as I can recall, all the default settings are on Basic. Unless otherwise specified. – Vick Vega Apr 11 '11 at 03:10