digest-authentication

The main difference is that it doesn’t require sending the username and password across the wire in plaintext. It is also immune to replay-attacks, as it uses a one-time number from the server. The server gives the client a one-time use number (a nonce) that it combines with the username, realm, password and the URI … Read more