HTTP Digest Authentication Misconceptions

• When Can A Server Challenge?

  • Any time it wants to

• Why Can A Server Challenge?

  • Any reason it wants to

• How Can A Server Distinguish Protection Domains?

  • Modify the realm?

Previous slide

Back to first slide

View graphic version