Apache HTTP Server Version 2.4
Description: | User authentication using MD5 Digest Authentication |
---|---|
Status: | Extension |
Module Identifier: | auth_digest_module |
Source File: | mod_auth_digest.c |
This module implements HTTP Digest Authentication
(RFC2617), and
provides an alternative to mod_auth_basic
where the
password is not transmitted as cleartext. However, this does
not lead to a significant security advantage over
basic authentication. On the other hand, the password storage on the
server is much less secure with digest authentication than with
basic authentication. Therefore, using basic auth and encrypting the
whole connection using mod_ssl
is a much better
alternative.