> That being said - > i. i'd like to explore Digest Access more, as a replacement for > CRAM-MD5
a long time ago I thought that you could use the nonce in digest auth to provide this kind of thing: http://search.cpan.org/dist/Apache-AuthDigest/Session/Session.pm fwiw --Geoff