note 98512 rejected from features.http-auth by danbrown

Note Submitter: vic at bidouille dot org ---- The Digest HTTP Authentication example implementation is incorrect. It uses the client-supplied nonce to check the validity of the credentials, instead of using the original server-supplied number. That way the client can simply ignore the server request and send a previously recorded or entirely forged reply, rendering the authentication just as vulnerable as the HTTP Basic authentication.