|visits||member for||6 months|
|seen||Mar 27 at 15:47|
|bio||website||blog.johantibell.com||visits||member for||6 months|
|location||seen||Mar 27 at 15:47|
HTTP Basic auth password storage more secure than Digest auth
Why can't you use bcrypt with digest auth? Can't we apply bcrypt to the value sent by the client (over SSL) and then compare it to the database value (which also had bcrypt applied to it)? From your question I guess there's a good reason, but I can't see it.