3 ms·
You could use HTTP digest authentication, with the salt as the realm. https://en.wikipedia.org/wiki/Digest_access_authentication https://en.wikipedia.org/wiki/
by anamexis 6y ago
You could use HTTP digest authentication, with the salt as the realm.
https://en.wikipedia.org/wiki/Digest_access_authentication https://en.wikipedia.org/wiki/Digest_access_authentication
- vbezhenar 6y agoOriginal implementation uses MD5. While I think that it's not broken, many people don't like those 3 letters and will avoid just for that. There are modern RFCs, but browsers are not adopting it. For example this Mozilla bug: https://bugzilla.mozilla.org/show_bug.cgi?id=472823 https://bugzilla.mozilla.org/show_bug.cgi?id=472823
- barbegal 6y agoI agree MD5 is not broken for digest authentication. MD5 is only weak for chosen-plaintext or brute force attacks. With a correctly generated nonce, it is more than secure enough.