use 'first hash' instead of password to do digest auth

Hi,

Maybe this is not a curl question, and it is my lack of knowledge about storage of credentials getting in the way.

Reading https://en.wikipedia.org/wiki/Digest_access_authentication made me realise that if I could store the username + password after first successful connection as "HA1", (thus: MD5(username:realm:password)), and reuse that value later on when the program runs again, then I can have reasonably secure storage of passwords in my application.

But libcurl would need to allow me obtaining that value, and passing HA1 later on instead of normal username+ password credentials, and of course authentication would have to be digest-only.

Does this make sense? Or is there a better/more common way for secure password storage I have overlooked.
Your feedback appreciated.

Thanks,

Erik

-------------------------------------------------------------------
Unsubscribe: https://cool.haxx.se/list/listinfo/curl-library
Etiquette: https://curl.haxx.se/mail/etiquette.html
Received on 2019-05-21