2 ms·

>The password is still revealed to the server. And with digest auth, the server must have the plain text password already. But sure, maybe there is a third opt

>The password is still revealed to the server. And with digest auth, the server must have the plain text password already. But sure, maybe there is a third option.