I've never implemented the status codes for browser purposes - only for APIs. HTTP Digest looks interesting, but I think I'd generally feel more comfortable ju

I've never implemented the status codes for browser purposes - only for APIs. HTTP Digest looks interesting, but I think I'd generally feel more comfortable just using HTTP Basic over HTTPS. Or better, of course, just doing it yourself with some signed cookies.