HTTP Digest support ?

Jonas Pfenniger zimbatm at
Thu Dec 27 22:12:00 MSK 2007

Hi there,

is it planned to add digest auth at some time ? It's not that basic
auth is not useful, but it's pretty weak on replay attacks. Nowadays,
every common browser supports digest auth so it would be really a

I'm also interested if it could support internal urls for the internal
password file, like X-Accel-Redirect does. It would be really useful
to delegate authentication to a third-party web application in a
multi-application setup.


More information about the nginx mailing list