4 ms·
Look into HTTP digest AUTH. It works in a manner you suggest but without the vulnerabilities in your suggested implementation (the a reply pointed out).
by flyinRyan 13y ago
Look into HTTP digest AUTH. It works in a manner you suggest but without the vulnerabilities in your suggested implementation (the a reply pointed out).
- tekacs 13y agoIt very much doesn't, not least because it does nothing to alleviate the issue that everything typed into a browser page is currently available for access to the site in question and should a MITM attack or similar attack occur, JS can trivially be inserted to capture passwords long before they're sent. :/