RE: Browsers supporting Digest Auth?

[Dean Gaudet <dg...@arctic.org>]

On Thu, 27 May 1999, Josh Cohen (Exchange) wrote:

> IE5 does support digest.  However, last I checked, the
> digest module wasnt compliant with the final digest spec.
> If memory serves, apache didnt support the client nonce, which
> IE insists upon since it increases security.
> 
> Does anyone know the status of the module ?

If you've got a patch to fix this, that'd be cool. 

I seem to recall that the final digest auth spec required state in the
HTTP server... which is like way hard to do in apache (easier with Ralf's
EAPI stuff).  But maybe I'm remembering something else. 

If we're not compliant the module should either be ditched or fixed. 

Dean

> 
> > -----Original Message-----
> > From: Renaud Bruyeron [mailto:renaud@w3.org]
> > Sent: Wednesday, May 26, 1999 11:40 AM
> > To: new-httpd@apache.org
> > Subject: Re: Browsers supporting Digest Auth?
> > 
> > 
> > 
> > 
> > Rodent of Unusual Size wrote:
> > > 
> > > Does anyone know where there's a list of browsers that support
> > > digest authentication, or plan to do so?
> > 
> > I just tried with NS 4.6, and Digest auth does not work.
> > I heard IE5 has it (but I can't confirm), and amaya [1] has it too (we
> > use it).
> > it's not listed on opera's feature list [2]. lynx 2.8.1 does not do it
> > (I just tried).
> > 
> >  - Renaud
> > 
> > [1] http://www.w3.org/Amaya/
> > [2] http://www.opera.com/features.html
> > 
>