Digest access authentication
Method of negotiating credentials between web server and browser
Digest access authentication
Digest access authentication is one of the agreed-upon methods a web server can use to negotiate credentials, such as username or password, with a user's web browser. This can be used to confirm the identity of a user before sending sensitive information, such as online banking transaction history. It applies a hash function to the username and password before sending them over the network. In contrast, basic access authentication uses the easily reversible Base64 encoding instead of hashing, making it non-secure unless used in conjunction with TLS. Technically, digest authentication is an application of cryptographic hashing with usage of nonce values to prevent replay attacks. It uses the HTTP protocol. DIGEST-MD5 as a SASL mechanism specified by RFC 2831 is obsolete since July 2011.
Read on Wikipedia · Image IETF HTTP Working Group (HTTPbis), Public domain
Open boosters, collect cards and trade them. Free to play.
Play for free