On Mon, Apr 2, 2012 at 10:10 AM, Nikolay Elenkov
<nikolay.elen...@gmail.com> wrote:
> On Mon, Apr 2, 2012 at 4:15 AM, Ralph Bergmann | the4thFloor.eu
> <ra...@the4thfloor.eu> wrote:
>> found an example
>>
>> http://www.android-dev-faq.com/2011/11/how-to-make-httpdigest-client.html
>>
>
> The implementation in Android is however broken: it uses a fixed nonce of 1.
> If you server is actually checking for replay requests, you might get errors.

This is, of course, for digest authentication. Basic authentication works, but
you should only use it over HTTPS.

-- 
You received this message because you are subscribed to the Google
Groups "Android Developers" group.
To post to this group, send email to android-developers@googlegroups.com
To unsubscribe from this group, send email to
android-developers+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/android-developers?hl=en

Reply via email to