Digest Authentication is described as more secure because what property is used?

Digest Authentication is described as more secure because what property is used?

• A. Digest
• B. Basic (password)
• C. Biometrics
• D. Token-based

Answer: (A)

Digest authentication relies on a challenge-response using a server-issued nonce, so the user proves knowledge of the password without sending it over the network. The client combines the password with the nonce, the request details, and other data to compute a hash, which is sent to the server. The server, which stores a hash of the user credentials, can verify this response by performing the same calculation. Because the actual password never traverses the network and each request uses a fresh nonce, eavesdroppers can’t obtain the password and replay attacks are mitigated. This hash-based, nonce-backed process is what makes Digest authentication more secure than simply sending a plain password.

Digest authentication relies on a challenge-response using a server-issued nonce, so the user proves knowledge of the password without sending it over the network. The client combines the password with the nonce, the request details, and other data to compute a hash, which is sent to the server. The server, which stores a hash of the user credentials, can verify this response by performing the same calculation. Because the actual password never traverses the network and each request uses a fresh nonce, eavesdroppers can’t obtain the password and replay attacks are mitigated. This hash-based, nonce-backed process is what makes Digest authentication more secure than simply sending a plain password.