[1364] in WWW Security List Archive
Re: Digest Authentication
daemon@ATHENA.MIT.EDU (smb@research.att.com)
Sun Dec 31 21:08:19 1995
From: smb@research.att.com
To: Dan Stromberg - OAC-DCS <strombrg@hydra.acs.uci.edu>
cc: ams@terisa.com (Allan M. Schiffman), http-wg@cuckoo.hpl.hp.com,
www-security@ns2.rutgers.edu
Date: Sun, 31 Dec 95 19:07:05 EST
Errors-To: owner-www-security@ns2.rutgers.edu
"Snefru" is widely available, tho probably not widely used, and uses
MD5 for authentication. The US goverment does not appear to have gone
after the author. I wrote a system using MD5 for auth, inspired by
snefru, but I have no intention of allowing it off campus, at this
point. :(
Snefru does not use MD5. It's an alternative to it, and not as strong.
