whump.com | More Like This WebLog

[ via Privacy Digest ] An inconsistent version of Digest Authentication in updates to Internet Explorer means that those clients may only authenticate to Microsoft’s IIS web server. Furthermore, other clients implementing Digest Authentication such as Opera, can’t authenticate with IIS. Microsoft claims a different reading of the standard for Digest Authentication, a method of ‘signing in’ to a web site that does not send plaintext passwords, but is not as secure as signing in over an encrypted, SSL, connection.

Possibly Related posts (machine generated):

1. Microsoft responds to the Halloween Letter
2. Server-Side XML
3. Microsoft Office 2003 and XML
4. The end of the Microsoft Era can be the beginning of the Age of Open Software
5. The content-addressable internet