Jim Jagielski wrote:
> I plan to T&R 1.3.31 most likely tomorrow... speak now
> or "forever" hold your peace.
I don't think the mod_digest.html stuff I sent was integrated, even though
it seemed people were happy with the wording. but I didn't want to just
commit it until the RM officially said so :) not that these docs are all
that critical of an issue...
--Geoff
Index: htdocs/manual/mod/mod_digest.html
===================================================================
RCS file: /home/cvs/httpd-docs-1.3/htdocs/manual/mod/mod_digest.html,v
retrieving revision 1.17
diff -u -r1.17 mod_digest.html
--- htdocs/manual/mod/mod_digest.html 15 Apr 2004 18:16:58 -0000 1.17
+++ htdocs/manual/mod/mod_digest.html 15 Apr 2004 19:50:40 -0000
@@ -32,10 +32,12 @@
<h2>Summary</h2>
<p>This module implements an older version of the MD5 Digest
- Authentication specification which will probably not work with
- modern browsers. Please see <a
+ Authentication specification. While suitable for most modern
+ browsers, mod_digest is known to not work with Microsoft
+ Internet Explorer. Please see <a
href="mod_auth_digest.html">mod_auth_digest</a> for a module
- which implements the most recent version of the standard.</p>
+ which implements the most recent version of the standard
+ and does not suffer from the same limitations as mod_digest.</p>
<h2>Directives</h2>
@@ -68,12 +70,16 @@
<p>MD5 authentication provides a more secure password system,
but only works with supporting browsers. As of this writing
- (December 2003), most major browsers support digest
- authentication. However, the only major browsers which support
- the old digest authentication format are <a href="http://www.opera.com/">Opera 4.0</a>,
- <a href="http://www.microsoft.com/windows/ie/">MS Internet
- Explorer 5.0</a> and <a href="http://www.w3.org/Amaya/">Amaya</a>.
- Therefore, we do not recommend using this feature on a large
+ (December 2003) most major browsers, including
+ <a href="http://www.microsoft.com/windows/ie/">MS Internet Explorer</a>,
+ <a href="http://www.opera.com/">Opera</a>,
+ <a href="http://www.netscape.com/">Netscape</a>,
+ <a href="http://www.mozilla.org/">Mozilla</a>, and
+ <a href="http://www.w3.org/Amaya/">Amaya</a>,
+ support the Digest authentication scheme. However, of this list
+ MS Internet Explorer is known to be incompatable with the
+ older digest authentication format supported by this module.
+ Therefore, we do not recommend using this module on a large
Internet site. However, for personal and intra-net use, where
browser users can be controlled, it is ideal.</p>