digets md5 without tls ?
list at joreybump.com
Tue Dec 4 18:11:11 EST 2007
Guillermo Gómez wrote, at 12/04/2007 04:55 PM:
> My first question is regarding digest-md5 authentication and tls, can
> it be done without the tls layer?
Yes. You can do this to offer some means of encrypting authentication
without requiring TLS. It (typically) does not encrypt the rest of the
message, though, which will be downloaded in the clear. If you do this,
make sure you do not also offer PLAIN or LOGIN authentication without TLS.
More information about the Info-cyrus