Názor k článku
Bezpečné přihlašování uživatelů

K cemu cela tato saskarna, kdyz mame neco cemu se rika
Digest Access Authentication

(viz muj, zrejme nepovsimnuty prispevek vyse)

http://www.faqs.org/rfcs/rfc2617.html

Cituji:

3 Digest Access Authentication Scheme

3.1 Introduction

3.1.1 Purpose

The protocol referred to as "HTTP/1.0" includes the specification for
a Basic Access Authentication scheme[1]. That scheme is not
considered to be a secure method of user authentication, as the user
name and password are passed over the network in an unencrypted form.
This section provides the specification for a scheme that does not
send the password in cleartext, referred to as "Digest Access
Authentication".

The Digest Access Authentication scheme is not intended to be a
complete answer to the need for security in the World Wide Web. This
scheme provides no encryption of message content. The intent is
simply to create an access authentication method that avoids the most
serious flaws of Basic authentication.