Webtatic.com

Just another technical blog

Posts Tagged ‘Webtatic::AuthDBI’

Secure digest HTTP authentication using Webtatic::AuthDBI

Posted 24th May 2009 by Andy | No Comments

The HTTP protocol gives a standardised way to provide authentication. This is supported via two modes:
Basic – transmit the username and password in a reversable base-64 encode
Digest – transmits complex MD5 hash of the username, realm, password, a server generated nonce, request method and request uri
Basic HTTP authentication suffers from a very easy man-in-the-middle attack, [...]