4 ms·
I'm no crypto expert but wouldn't using a nonce allow this approach to work?
by zepolen 15y ago
I'm no crypto expert but wouldn't using a nonce allow this approach to work?
- pavpanchekha 15y agoHow would you check the nonce? All your server gets is a black box hash.
- IgorPartola 15y agoNot a security expert here. Doesn't http://en.wikipedia.org/wiki/Digest_access_authentication http://en.wikipedia.org/wiki/Digest_access_authentication do this? Also the server could store the nonce in a session.