Digest access authentication: Difference between revisions

Content deleted Content added
m clean up spacing around commas and other punctuation fixes, replaced: ,a → , a
Impact of MD5 security on digest authentication: removing strong claim that would need a strong proof, since its related to security
Line 76:
| title = On the Security of HMAC and NMAC Based on HAVAL, MD4, MD5, SHA-0 and SHA-1
|author1=Jongsung Kim |author2=Alex Biryukov |author3=Bart Preneel |author4=Seokhie Hong | publisher = [[International Association for Cryptologic Research|IACR]]
}}</ref> cause some doubt over other MD5 applications as well. So far, however, MD5 collision attacks have not been shown to pose a threat to digest authentication{{Citation needed|date=November 2014}}, and the RFC 2617 allows servers to implement mechanisms to detect some collision and [[replay attack]]s.
 
== HTTP digest authentication considerations ==