RE: [PHP] Digest Authentication
| From: | Matt Schroebel | Date: | Thu, 22 Aug 2002 17:14:07 +0000 |
| Subject: | RE: [PHP] Digest Authentication | ||
| Groups: | php.general | ||
| Request: | Send a blank email to php-general+get-113651@lists.php.net to get a copy of this message | ||
> From: Seairth Jacobs [mailto:seairth@seairth.com]
> Sent: Thursday, August 22, 2002 12:29 PM
> To: php-general@lists.php.net
> Subject: [PHP] Digest Authentication
>
>
> I am having trouble finding working examples of HTTP Digest
> Authentication,
> esp. in PHP. Doe anyone have any links or code they can
> share? Also, I
> know that not all browsers support it or have incompatible
> support. Does
> anyone have a list of which browsers support what
> authentication schemes?
You can read what the Apache Group has to say about Digest Authentication at:
http://httpd.apache.org/docs/howto/auth.html#digest
It's not really any better the Basic. While user/password is encryted the data is still sent in
cleartext. And if someone captures the encrypted user/password values, they can send it and get the
page.