Understanding HTTP Digest Access Authentication
SSL is the most modern and secure method of sending user authentication data over the public Internet. But if SSL is not available, you should turn to HTTP’s Digest Access Authentication over it’s Basic Authentication. Digest Access improves on Basic by sending password information as an MD5-hash so it’s harder to reverse engineer than the plain text/Base64 encoding. This article discussed Digest Access, including the security features that update the method’s original RFC.








