|
Digest access authentication is one of the agreed methods a web page can use to negotiate credentials with a web user (using the HTTP protocol). This method builds upon (and obsoletes) the basic authentication scheme, allowing user identity to be established without without having to send a password in plaintext over the network.
The scheme makes use of MD5 hashes, although it should be noted that the MD5 algorithm is no longer considered suitable for cryptographic purposes.
Digest access authentication was originally specified by RFC 2069, which was later replaced by RFC 2617.
See also
|
