+1

I believe if spnego fails its supposed to fall back to digest. I'd like to have that implemented properly.

On Sep 8, 2010, at 12:19 PM, Andriod Dev <lists@ruby-forum.com> wrote:

> Jonas Pfenniger wrote:
>> Hi there,
>>
>> is it planned to add digest auth at some time ? It's not that basic
>> auth is not useful, but it's pretty weak on replay attacks. Nowadays,
>> every common browser supports digest auth so it would be really a
>> plus.
>>
>> I'm also interested if it could support internal urls for the internal
>> password file, like X-Accel-Redirect does. It would be really useful
>> to delegate authentication to a third-party web application in a
>> multi-application setup.
>
> Hi,
>
> Any update on digest auth? I want to write a web service that would
> connect to a remote third party web server for retrieving data. The
> remote server requires digest authentication.
>
> Thanks in advance.
>
> --
> Posted via http://www.ruby-forum.com/.
>
> _______________________________________________
> nginx mailing list
> nginx@nginx.org
> http://nginx.org/mailman/listinfo/nginx

_______________________________________________
nginx mailing list
nginx@nginx.org
http://nginx.org/mailman/listinfo/nginx