digets md5 without tls ?

[Jorey Bump]

Guillermo Gómez wrote, at 12/04/2007 04:55 PM:

> My first question is regarding digest-md5 authentication and tls, can
> it be done without the tls layer?

Yes. You can do this to offer some means of encrypting authentication 
without requiring TLS. It (typically) does not encrypt the rest of the 
message, though, which will be downloaded in the clear. If you do this, 
make sure you do not also offer PLAIN or LOGIN authentication without TLS.