Re: Digest Authentication
| From: | Seairth Jacobs | Date: | Thu, 22 Aug 2002 20:06:58 +0000 |
| Subject: | Re: Digest Authentication | ||
| References: | 1 2 | Groups: | php.general |
| Request: | Send a blank email to php-general+get-113673@lists.php.net to get a copy of this message | ||
No, I had not meant NTLM authentication. However, support for this wouldn't
hurt as well, I suppose. What I am looking to do is something like the
following:
if browser supports digest authentication
use digest authentication
else
use basic authentication
right now, though, it looks like I will be using basic authentication only,
since most browsers support it. If it becomes necessary, I will use SSL to
encrypt both the authentication headers (and everything else), but I would
like to avoid this if possible. In my case, I am more concerned about
someone stealing login information that I am about someone seeing something
they shouldn't see. With basic authentication, there is a risk of the
first. With digest authentication (done properly), there is only a risk of
the second. And since most of the viewable data will be public anyhow, this
is not much of a concern... for now...
---
Seairth Jacobs
seairth@seairth.com
"Manuel Lemos" <mlemos@acm.org> wrote in message
news:3D6537B8.1010906@acm.org...
> Hello,
>
> On 08/22/2002 01:29 PM, Seairth Jacobs wrote:
> > I am having trouble finding working examples of HTTP Digest
Authentication,
> > esp. in PHP. Doe anyone have any links or code they can share? Also, I
> > know that not all browsers support it or have incompatible support.
Does
> > anyone have a list of which browsers support what authentication
schemes?
>
> Do you mean NTLM authentication?
>
>
> --
>
> Regards,
> Manuel Lemos
>