Blogs

In the realm of remote document access and editing, WebDAV stands as a prominent solution. Its versatility and customer demand make it an invaluable tool for many organizations. However, WebDAV's support for HTTP Basic and Digest authentication methods presents a security challenge, particularly in the realm of password storage. This blog post explores why the feature of secure access through WebDAV exists, the problem it solves, and how users can benefit from it.

Why Does This Feature Exist?

The existence of secure access through WebDAV is rooted in a fundamental concern: the need to balance convenience with security. WebDAV remains a vital tool for remote document access and editing, and its demand is clear. However, the challenge arises with Digest authentication.

Given the necessity of WebDAV support and the inability to remove it, the focus shifts to reducing the impact of a successful attack. This is achieved through the implementation of a separate, strong password for Digest authentication.

What Problem Does It Solve?

The introduction of this feature addresses a critical problem: how to continue using WebDAV for remote document access and editing without compromising the security of user accounts. By separating Digest authentication from the user's primary account password, organizations can maintain the convenience of WebDAV while enhancing security.

How Can It Be Used?

Implementing this feature is straightforward, and it puts control in the hands of users:

Installation:

Once the feature is installed, WebDAV access using Digest authentication will temporarily cease.

User Action:

To restore WebDAV access, users simply need to generate a new WebDAV password. They can do this by navigating to their Account Settings and selecting the Password option.

Modal Guidance:

A modal will provide users with the necessary username and password to use when authenticating via Digest.

In summary, secure access through WebDAV serves as a vital solution for organizations seeking to maintain the convenience of remote document access while bolstering security measures. By implementing a stronger password generation method, organizations can minimize the risk of security breaches and protect user accounts from potential attacks.

This feature will be available in the upcoming Q4 quarterly release.