Auth_digest not working

Maxim Dounin mdounin at mdounin.ru
Wed Aug 3 12:31:05 UTC 2016


Hello!

On Tue, Aug 02, 2016 at 05:55:13PM +0200, Matthias Fechner wrote:

> Am 01.08.2016 um 00:53 schrieb Maxim Dounin:
> > The auth_digest module is a 3rd party one.  And the message 
> > suggests there is a bug in it, or it's not compatible with the 
> > current version of nginx.
> >
> > You may consider using an official module instead, auth_basic.  
> > See here for details:
> 
> thanks, with auth_basic it is working.
> 
> But as auth_basic transfers the password I would really prefer to have
> digest running which is much more secure.

To protect passwords in transit consider using SSL/TLS instead.

> Are there plans the get the auth-digest into nginx core?

No.

-- 
Maxim Dounin
http://nginx.org/



More information about the nginx mailing list