Digest access authentication: Difference between revisions

Revision as of 14:33, 4 January 2023

Revision as of 00:50, 12 March 2023

Line 1:

{{Short description|Method of negotiating credentials between web server and browser}}

{{HTTP}}

'''Digest access authentication''' is one of the agreed-upon methods a [[web server]] can use to negotiate credentials, such as username or password, with a user's [[web browser]]. This can be used to confirm the identity of a user before sending sensitive information, such as online banking transaction history. It applies a [[hash function]] to the username and [[password]] before sending them over the network. In contrast, [[basic access authentication]] uses the easily reversible [[Base64]] encoding instead of hashing, making it non-secure unless used in conjunction with [[Transport Layer Security|TLS]].