HTTP digest authentication no longer works in our app since iOS 10 due to wrong nonce-count in Authorization: Digest header generated by NSURLSession.
The same code
Apple Developer Technical Support confirm that is a bug of iOS 10. Hope it will be fixed soon.
Thank you for contacting Apple Developer Technical Support (DTS). We believe this issue is a bug. Please file a bug report using the Bug Reporter tool https://developer.apple.com/bug-reporting/.
Update: Apple fixed this issue in iOS 10.2 Beta 3