[prev in list] [next in list] [prev in thread] [next in thread] 

List:       nginx
Subject:    HTTP Digest support ?
From:       "Jonas Pfenniger" <zimbatm () oree ! ch>
Date:       2007-12-27 19:12:00
Message-ID: e3caf1460712271112x54c2d0ffh7e3f3c80d41684c0 () mail ! gmail ! com
[Download RAW message or body]

Hi there,

is it planned to add digest auth at some time ? It's not that basic
auth is not useful, but it's pretty weak on replay attacks. Nowadays,
every common browser supports digest auth so it would be really a
plus.

I'm also interested if it could support internal urls for the internal
password file, like X-Accel-Redirect does. It would be really useful
to delegate authentication to a third-party web application in a
multi-application setup.

-- 
Cheers,
  zimbatm



[prev in list] [next in list] [prev in thread] [next in thread]