# HTTP Digest support?

**URL:** <https://www.ruby-forum.com/t/http-digest-support/124346>\
**Category:** NGINX\
**Created:** [December 27, 2007, 8:22pm UTC](https://www.ruby-forum.com/t/http-digest-support/124346 "2007-12-27T20:22:10Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![zenzei](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/z/7bcc69/32.png) [@zenzei](https://www.ruby-forum.com/u/zenzei)\
**Post date:** [December 27, 2007, 8:22pm UTC](https://www.ruby-forum.com/t/http-digest-support/124346/1 "2007-12-27T20:22:10Z")

</div>

Hi there,

is it planned to add digest auth at some time ? It’s not that basic  
auth is not useful, but it’s pretty weak on replay attacks. Nowadays,  
every common browser supports digest auth so it would be really a  
plus.

I’m also interested if it could support internal urls for the internal  
password file, like X-Accel-Redirect does. It would be really useful  
to delegate authentication to a third-party web application in a  
multi-application setup.

---

<div class="post-metadata">

**Author:** ![zenzei](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/z/7bcc69/32.png) [@zenzei](https://www.ruby-forum.com/u/zenzei)\
**Post date:** [September 8, 2010, 9:19pm UTC](https://www.ruby-forum.com/t/http-digest-support/124346/2 "2010-09-08T21:19:57Z")

</div>

Jonas P. wrote:

> Hi there,
> 
> is it planned to add digest auth at some time ? It’s not that basic  
> auth is not useful, but it’s pretty weak on replay attacks. Nowadays,  
> every common browser supports digest auth so it would be really a  
> plus.
> 
> I’m also interested if it could support internal urls for the internal  
> password file, like X-Accel-Redirect does. It would be really useful  
> to delegate authentication to a third-party web application in a  
> multi-application setup.

Hi,

Any update on digest auth? I want to write a web service that would  
connect to a remote third party web server for retrieving data. The  
remote server requires digest authentication.

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![zenzei](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/z/7bcc69/32.png) [@zenzei](https://www.ruby-forum.com/u/zenzei)\
**Post date:** [September 8, 2010, 9:36pm UTC](https://www.ruby-forum.com/t/http-digest-support/124346/3 "2010-09-08T21:36:01Z")

</div>

+1

I believe if spnego fails its supposed to fall back to digest. I’d like  
to have that implemented properly.