Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
I am trying to implement my own service side authentication component for WebApi that can perform matching for hashed username/password sent by webclient described at How can I do digest authentication with HttpWebRequest?
This article (http://lbadri.wordpress.com/2012/08/10/digest-authentication-with-asp-net-web-api-part-1/) suggests that the IIS Digest Authentication uses MD5 for hashing.
Are there any official IIS docs that confirm this?
Yes their are offical documents that describe it as using MD5
“Digest authentication transmits credentials across the network as an MD5 hash”
– Microsoft Docs