What is the difference between Digest and Basic Authentication?

前端 未结 4 1002
北荒
北荒 2020-12-12 08:34

What is the difference between Digest and Basic Authentication ?

4条回答
  •  轻奢々
    轻奢々 (楼主)
    2020-12-12 09:15

    Digest Authentication communicates credentials in an encrypted form by applying a hash function to: the username, the password, a server supplied nonce value, the HTTP method and the requested URI.

    Whereas Basic Authentication uses non-encrypted base64 encoding.

    Therefore, Basic Authentication should generally only be used where transport layer security is provided such as https.

    See RFC-2617 for all the gory details.

提交回复
热议问题