nginx-http-auth-digest icon indicating copy to clipboard operation
nginx-http-auth-digest copied to clipboard

Requires qop-based authentication

Open samizdatco opened this issue 12 years ago • 0 comments

the module currently lacks backward compatibility with clients that don't provide ‘qop’ fields in the Authorize header. according to the RFC the server should work without it, but is it worth supporting the less secure version of an already not-bulletproof authentication scheme?

samizdatco avatar Nov 04 '11 23:11 samizdatco