Secure Web Application Policy

Last updated:July 2003

Policy:

IT-developed and supported web-based applications may not accept plain text passwords for secure NetID authentication at the University of Nevada, Reno.

The following are acceptable security methods for protecting the University's NetID.

  • Form authentication with a required SSL Certificate
  • Plain text authentication with a required SSL Certificate
  • IIS with NTLM-based authentication and Internet Explorer 5.5 or later browser
  • Public Key Certificate-based authentication

Reason:

Using one of these methods of authentication is required to protect the University's NetID authentication process.

Resolution:

Other methods of authentication are not permitted.