Mail module: auth cram-md5 does not work

Petite Abeille petite.abeille at gmail.com
Fri Feb 6 20:52:35 MSK 2009


On Feb 5, 2009, at 11:41 PM, Miguel Beccari wrote:

> I have username and chanllenge (7c74db51a3adfc16a65a47aca136d518).  
> Could I go back to password?

No.

This is how it goes:

(1) Use the username to retrieve the password
(2) Use that password to HMAC-MD5 the challenge
(3) Compare the HMAC to the digest
(4) If digest and HMAC match, the authentication has succeeded

HTH.

Cheers,

--
PA.
http://alt.textdrive.com/nanoki/





More information about the nginx mailing list