HTTP Digest Authentication versus SSL

后端 未结 3 940
广开言路
广开言路 2020-12-09 03:18

What is the difference between HTTP Digest Authentication and SSL from a performance, security and flexibility point of view?

3条回答
  •  孤街浪徒
    2020-12-09 03:49

    Some server implementations of HTTP Digest Authentication force you to save the cleartext passwort on the server better implementations save username:realm:MD5(username:realm:password) this has the effect of salting the stored password which gives some security if attackers have obtained the password file.

提交回复
热议问题