6 ms·
> Hash based challenge-response authentication does require the server to know the plain password. Not true. Read up on HTTP Digest authentication. It's desc
by netdog 16y ago
> Hash based challenge-response authentication does require the server to know the plain password.
Not true. Read up on HTTP Digest authentication. It's described in RFC2617.
- jholman 16y agoOh please. That's 12 years old, it can't possible still apply. </troll>