101 reputation
bio website blog.johantibell.com
visits member for 1 year, 10 months
seen Mar 27 '14 at 15:47

comment HTTP Basic auth password storage more secure than Digest auth
Why can't you use bcrypt with digest auth? Can't we apply bcrypt to the value sent by the client (over SSL) and then compare it to the database value (which also had bcrypt applied to it)? From your question I guess there's a good reason, but I can't see it.