3 ms·
Your point is correct but AFAIK your facts are incorrect. Digest authentication can indeed store the password in hashed form. The problem is the the client do
by colanderman 13y ago
Your point is correct but AFAIK your facts are incorrect.
Digest authentication can indeed store the password in hashed form. The problem is the the client doesn't need the plaintext password; this hashed form suffices.
See <http://en.wikipedia.org/wiki/Digest_access_authentication#Advantages> http://en.wikipedia.org/wiki/Digest_access_authentication#Ad....
- andrewaylett 13y agoThat's what I meant by 'a usable representation thereof' -- sufficient data for a client to be able to use it to authenticate.
- colanderman 13y agoYa that wasn't very clear. Thanks for the downvote.
- andrewaylett 13y agoAs far as I can tell, it's not possible for someone to down-vote a response to a comment they've made -- certainly I'm not able to.