RFC 4169: Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA) Version-2

HTTP Digest, as specified in RFC 2617, is known to be vulnerable to man-in-the-middle attacks if the client fails to authenticate the server in TLS, or if the…

Read RFC 4169 on the RFC Editor

Outgoing relationships (5 related RFCs)

Normative reference — RFC 3261: SIP: Session Initiation Protocol
Normative reference — RFC 2104: HMAC: Keyed-Hashing for Message Authentication
Normative reference — RFC 2045: Multipurpose Internet Mail Extensions (MIME) Part One: Format of Internet Message Bodies
Normative reference — RFC 2617: HTTP Authentication: Basic and Digest Access Authentication
Normative reference — RFC 3310: Hypertext Transfer Protocol (HTTP) Digest Authentication Using Authentication and Key Agreement (AKA)

Incoming relationships (3 related RFCs)

Informatively referenced by — RFC 5226: Guidelines for Writing an IANA Considerations Section in RFCs
Informatively referenced by — RFC 8126: Guidelines for Writing an IANA Considerations Section in RFCs
Informatively referenced by — RFC 9048: Improved Extensible Authentication Protocol Method for 3GPP Mobile Network Authentication and Key Agreement (EAP-AKA')