Digest access authentication
Method of negotiating credentials between web server and browser
Digest access authentication is one of the agreed-upon methods a web server can use to negotiate credentials, such as username or password, with a user's web browser. This can be used to confirm the identity of a user before sending sensitive information, such as online banking transaction history.
Nº Q554318 ★
Common · Literature
Digest access authentication
Method of negotiating credentials between web server and browser
Digest access authentication is one of the agreed-upon methods a web server can use to negotiate credentials, such as username or password, with a user's web browser. This can be used to confirm the identity of a user before sending sensitive information, such as online banking transaction history.
Last price
—
Floor price
—
7-day median
—
30-day sales
0
30-day range
—
In circulation
0
Price history
median
low – high
sales
No sales in this period
Show table
| Date | median | Low | High | sales |
|---|
Sales history
- Last sale
- —
- 30-day average
- —
- 30-day low
- —
- 30-day high
- —
- Sales 7d
- 0
- Sales 30d
- 0
No sales yet.
Anonymous sales: no buyer or seller shown. Figures count player-to-player sales only.
From Wikipedia
Digest access authentication is one of the agreed-upon methods a web server can use to negotiate credentials, such as username or password, with a user's web browser. This can be used to confirm the identity of a user before sending sensitive information, such as online banking transaction history. It applies a hash function to the username and password before sending them over the network. In contrast, basic access authentication uses the easily reversible Base64 encoding instead of hashing, making it non-secure unless used in conjunction with TLS. Technically, digest authentication is an application of cryptographic hashing with usage of nonce values to prevent replay attacks. It uses the HTTP protocol. DIGEST-MD5 as a SASL mechanism specified by RFC 2831 is obsolete since July 2011.
Text: Wikipédia, CC BY-SA 4.0. · Image: IETF HTTP Working Group (HTTPbis) (Public domain) ·
Related cards
Passkey (credential)
Cryptographic credentials for use as a substitute for passwords
Nº Q118213879 ★★★
OAuth
Open standard for access delegation, commonly used as a way for internet users to grant websites or applications access to their information on other websites but without giving them the passwords
Nº Q743238 ★★★
RADIUS
Authentication networking protocol
Nº Q747499 ★★
Diceware
Method for generating passphrases using dice
Nº Q1209372 ★★★
DNS over HTTPS
Protocol to run DNS queries over HTTPS
Nº Q50826096 ★★★★
Web Server Gateway Interface
Calling convention for web servers to forward requests to web applications written in Python
Nº Q539164 ★★