A challenge-response authentication mechanism for HTTP
Digest authentication is a challenge-response authentication mechanism for HTTP that protects a client's username and password using one-way hashes with nonces. Though better than basic authentication, digest authentication is not considered strong authentication. It is specified in IETF's RFC 2617.