> It does a challenge/response. However, digest authentication will > only work > for IIS installed on a domain controller (of all things ...). Most people > consider opening up their domain controllers to the internet a bad thing > (allthough it is getting increasinly trendy to proxy the internal > webserver > out on the internet).
Digest auth is a web server function. Why in the world would it require a domain controller? You can read messages from the DOTNET archive, unsubscribe from DOTNET, or subscribe to other DevelopMentor lists at http://discuss.develop.com.