Re: Digest Authentication

"Manuel Lemos" <mlemos@acm.org> wrote in message news:3D6549F3.1070208@acm.org... > > Anyway, if you are looking for a more browser independent message, you > may want to try using forms based authentication using md5 to encrypt > the passwords. It will require a Javascript enabled browser but that is > more than 95% of the browsers. The problem with this is that I am attempting to implement a RESTful webservice. I do not want to use PHP's session handling because it tries to do things that I do not want done (like sending cookies). In order to work within the REST principles, I also do not want alter my URLs by passing around a Session ID. As a result, my options are very limited, hence the HTTP Authentication scheme. Using an HTML form would be nice (and would look *much* nicer), but it still requires me to assign and keep track of some sort of session ID, which would mean the use of cookies or modifying my URLs (either altering the path or adding a querystring). --- Seairth Jacobs seairth@seairth.com