Hi Tim,

Cleartext is faster than MD5, and only barely less-secure.

If security is a priority, you might prefer SHA2 in the external cryptography package.

- Chris

On Sun, Apr 9, 2023 at 8:15 PM tim Rowledge <tim@rowledge.org> wrote:

Whilst slightly updating the WebServer Help page I noticed Andreas' comment that MD5 authentication was 'pathetic'. Certainly the simple version in WebUtils might be (I couldn't honestly judge it) but we do have a fairly serious crypto package these days. Has anybody ever made WebServer/Client use the presumably much faster MD5 in that package?

tim
--
tim Rowledge; tim@rowledge.org; http://www.rowledge.org/tim
There are only two really difficult problems in programming:
-Naming
-Cache invalidation
-Off-by-one errors