News for hackers. Stuff that matters.
Re:Hack of Cupid Media dating website exposes 42 million pla... by MichaelGG on Wednesday November 20, 2013 @06:10AM (#6767364)
Additionally, you'd need new browser APIs (AFAIK) to detect failed logins, render the login UI, etc. Otherwise, it's going to look out of place and confusing. Product managers are unlikely to accept the default browser/OS handling.

And digest auth means a DB dump has enough information to authenticate as a client, which is considerably worse for security if a server gets compromised.

There are no comments on this comment yet.