Xeoncross Posted May 23, 2008 Share Posted May 23, 2008 I have been looking over implementing OpenID into my blog and I found a class called phpMyID. This class uses HTTP Digest authentication to login stating it is more secure than leaving your password in plain text on the webpage (in an HTML form). However, my understanding is that both webforms and Digest auth send the data over the network in text form. Am I wrong? Does HTTP Auth md5 encode the password in the browser before it is sent? OR what makes the author think it is more secure? Link to comment https://forums.phpfreaks.com/topic/106970-http-digest-authentication-vs-webforms/ Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.