1 message in ru.sysoev.nginxHTTP Digest support ?
FromSent OnAttachments
Jonas PfennigerDec 27, 2007 11:11 am 
Actions with this message:
Paste this link in email or IM:
Paste this link in email or IM:
Atom feed for this thread
Paste this URL into your reader:
Subject:HTTP Digest support ?Actions...
From:Jonas Pfenniger (zimb@public.gmane.org)
Date:Dec 27, 2007 11:11:37 am
List:ru.sysoev.nginx

Hi there,

is it planned to add digest auth at some time ? It's not that basic auth is not useful, but it's pretty weak on replay attacks. Nowadays, every common browser supports digest auth so it would be really a plus.

I'm also interested if it could support internal urls for the internal password file, like X-Accel-Redirect does. It would be really useful to delegate authentication to a third-party web application in a multi-application setup.

-- Cheers, zimbatm