digest auth

Previous wordsThe basic certification described in the previous article is convenient and flexible, but extremely unsafe. The user name and password are transmitted in clear text, and no action is taken to prevent tampering with the message. The

Digest access authenticationHttps://en.wikipedia.org/wiki/Digest_access_authentication Digest access authentication is one of the Agreed-upon methods a Web server can use to negotiate credentials, suc H as username or password, with a user '

No authentication method After a correct client request is sent to the server, the HTTP server returns the 200 status code and directly returns the content. Message example: Request: Get. http: // 10.127.194.3: 8061/voiceobjects ..... Return

Http authentication .... BASIC:In the context of an HTTP transaction, Basic access authentication are a method for a Web browser or other client Program to provide a user name and password when making a request. [1]Before transmission, the user name

In the previous article, we mainly discussed the use of HTTP Basic authentication method, because the way HTTP Basic authentication determines that it has a large security problem, so next look at another way to verify: Digest authentication, that

"Digest" Authentication (Digest authentication) is a simple authentication mechanism, originally developed for the HTTP protocol, and is often called an HTTP digest, described in RFC2671. Its authentication mechanism is simple, it uses hash (hash)

A. Basic CertificationAfter the client connects the user name and password with ":", the ciphertext is sent to the server by BASE64 encryption via the authorization request header, and each request needs to be sent repeatedly. The Basic

This article transferred from: http://www.cnblogs.com/lanxiaoke/p/6357501.htmlSummary Certification Simple introductionAbstract authentication is the improvement of the basic authentication, that is, the use of abstract instead of account password,

Asp. NET permission Authentication seriesAsp: Forms AuthenticationAsp: HTTP Basic Authentication (http Base)NET rights authentication: Windows authenticationAsp: Digest Authentication (digest Authentication)First, The origin of the summary

I. HTTP BasicAfter the client connects the user name and password with ":", the ciphertext is sent to the server by BASE64 encryption via the authorization request header, and each request needs to be sent repeatedly. The Basic authentication