4 ms·
How would you check the nonce? All your server gets is a black box hash.
by pavpanchekha 15y ago
How would you check the nonce? All your server gets is a black box hash.
- IgorPartola 15y agoNot a security expert here. Doesn't http://en.wikipedia.org/wiki/Digest_access_authentication http://en.wikipedia.org/wiki/Digest_access_authentication do this? Also the server could store the nonce in a session.