I read a lot of article stating that basic authentication + SSL is the way to go over Digest Authentication.
I was thinking of:
- client request the login form
- server sends back the login form with nonce
- client use the nonce to encrypt username + password and sends over SSL
With my basic reading and understanding, I see it more secure because I add a layer of security in case SSL is breached. Or is it not?