Re: [xml-dev] Re: Cookies at XML Europe 2004 -- Call for Participation

[Alaric B Snell <alaric@alaric-snell.com>]

John Cowan wrote:

> I reread RFC 2617 last night, and it does seem to me that although it
> is very properly self-deprecating about the level of security provided
> by digest authentication, it really does provide decent authentication
> (though not integrity protection or, of course, confidentiality)

Yes, Digest auth is pretty good - it'd be great if it was implemented 
widely enough to actually be safely usable, though :-(

ABS