- Firstly a challenge is received via an Ajax call.
- Then the random challenge is concatenated to the user provided password like this
loginPWD= hex(sha256(password+challenge)). This action is performed at client-side (the browser that visits the dsl-router's web page)
- Then the
challengeis sent back to the roputer's authentication as authentication credentials ontop of a https channel using https with self-signed certs using an Ajax Call.