Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

Possible Duplicate:
Client side password hashing

How one design support for digest authentication in client side. HTML form probably won't help. Does one need javascript and set the header explicitly or any better way.

share|improve this question

marked as duplicate by Rook, Rory Alsop Nov 3 '12 at 9:51

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

1 Answer 1

up vote 1 down vote accepted

You don't because its an OWASP Violation. You have to use HTTPS, for logging in AND the lifetime of the session.

share|improve this answer
    
Thank you for that resource. I am surprised it is considered the duplicate of the mentioned qn as that was related to why client side hashing. anyway, doesn't matter, this was my first qn :-(. While reading about security, I had the impression that Digest based auth is in lieu of basic-http auth. Anyway thanks for the link. –  bsr Nov 3 '12 at 12:33

Not the answer you're looking for? Browse other questions tagged or ask your own question.