I am trying to implement my own service side authentication component for WebApi that can perform matching for hashed username/password sent by webclient described at How can I do digest authentication with HttpWebRequest?
This article (http://lbadri.wordpress.com/2012/08/10/digest-authentication-with-asp-net-web-api-part-1/) suggests that the IIS Digest Authentication uses MD5 for hashing.
Are there any official IIS docs that confirm this?