-2

Possible Duplicate:
Client side password hashing

How one design support for digest authentication in client side. HTML form probably won't help. Does one need javascript and set the header explicitly or any better way.

Improve this question
0

1 Answer 1

Reset to default
2

You don't because its an OWASP Violation. You have to use HTTPS, for logging in AND the lifetime of the session.

Improve this answer
1
  • Thank you for that resource. I am surprised it is considered the duplicate of the mentioned qn as that was related to why client side hashing. anyway, doesn't matter, this was my first qn :-(. While reading about security, I had the impression that Digest based auth is in lieu of basic-http auth. Anyway thanks for the link.
    – bsr
    Nov 3, 2012 at 12:33

Not the answer you're looking for? Browse other questions tagged .