Security warning using basic authentication, OWA and IE7

This applies to:

• Microsoft Exchange Server 2000

Summary

Since upgrading to IE7 users are now getting addition security warnings when accessing Outlook Web Access (OWA) using basic authentication. The warning text is as follows,

Warning: The server is requesting that your username and password be sent in an insecure manner (basic authentication without a secure connection)

Is there a way to remove/disable this warning in IE7?

Solution

Unfortunately there is little that can be done about this other than changing the way your authentication works at the server end which will obviously require careful consideration. I suppose it is one of the side effects of a more "security" aware IE7. For more information on the additions in IE7 please see the "Enhancements for Basic Authentication" section at,

http://blogs.msdn.com/ie/archive/2006/03/15/552246.aspx

If the server is configured to use OWA with HTTPS, this will not occur. For more information on configuring OWA with SSL see,

http://support.microsoft.com/kb/320291/en-us

THE INFORMATION IN THIS DOCUMENT IS PROVIDED ON AN AS-IS BASIS WITHOUT WARRANTY OF ANY KIND. PROVIDER SPECIFICALLY DISCLAIMS ANY OTHER WARRANTY, EXPRESS OR IMPLIED, INCLUDING ANY WARRANTY OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL PROVIDER BE LIABLE FOR ANY CONSEQUENTIAL, INDIRECT, SPECIAL OR INCIDENTAL DAMAGES, EVEN IF PROVIDER HAS BEEN ADVISED BY USER OF THE POSSIBILITY OF SUCH POTENTIAL LOSS OR DAMAGE. USER AGREES TO HOLD PROVIDER HARMLESS FROM AND AGAINST ANY AND ALL CLAIMS, LOSSES, LIABILITIES AND EXPENSES.

Document ID: SKB0471
Published on: 26 Feb 2007