Community Proposals

Apache has modules for both digest authentication and basic authentication. I've seen recommendations to use digest authentication because it doesn't send the password in clear text.

However, if my site is HTTPS, aren't all the headers including the ones for basic authentication encrypted anyway? Is there any reason to prefer digest authentication over basic authentication for a site that is HTTPS only?

is a duplicate

This question has been asked before and has already been answered. It should be marked as a duplicate.

Please enter the URL of the proposed duplicate in the details field below.

not constructive

This question cannot be answered in a way that is helpful to anyone. It's not possible to learn something from possible answers, except for the solution for the specific problem of the asker.

community not specified

This question is missing a tag for an active community proposal. If the proposal this question is part of exists, please add the tag and the question can be reopened. If the proposal does not yet exist, please start an entry in the Descriptions category to describe the intended community. Descriptions can be fleshed out over time.

Communities

Comments on Is digest authentication more secure than basic authentication over HTTPS?

Is digest authentication more secure than basic authentication over HTTPS? Question

1 comment thread