Scribd Logo
Upload

Welcome to Scribd!

  • Web Security

    Uploaded by

    Tamptress Vamp
    26 views13 pages
    WWW-Authenticate Digest Authentication attempts to overcome the shortcomings of Basic Authentication. The nonce is used in the browser in a 1-way function (MD5, SHA1.) to encode the userid and password for the server.

    Original Description:

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    PPT, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    Report this Document
    WWW-Authenticate Digest Authentication attempts to overcome the shortcomings of Basic Authentication. The nonce is used in the browser in a 1-way function (MD5, SHA1.) to encode the userid and password for the server.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    26 views13 pages

    Web Security

    Uploaded by

    Tamptress Vamp
    WWW-Authenticate Digest Authentication attempts to overcome the shortcomings of Basic Authentication. The nonce is used in the browser in a 1-way function (MD5, SHA1.) to encode the userid and password for the server.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as PPT, PDF, TXT or read online from Scribd
    Flag for inappropriate content
    of 13

    HTTP Authentication

    Client requests a protected resource

    Client
    Web Server
    Server responds with a 401 (not
    authorized and a challenge request
    for the client to authenticate
    Client Response
    WWW-Authenticate
    WWW-Authenticate
    WWW-Authenticate
    back to SSL
    New in Java 1.4
    JCE
     JCE covers
     encryption and decryption
     symmetric bulk encryption, such as DES, RC2, and IDEA
     Symmetric stream encryption, such as RC4
     Asymmetric encryption, such as RSA
     Password-based encryption (PBE)
     key agreement
     Message Authentication Code (MAC)
     Strong Cryptography is the default
     unlimited is available (depending on export restrictions)
    JSSE
    JAAS
    Java GSS-API
    Java Certification Path API

    You might also like