Digest Authentication

Digest authentication is a challenge response authentication method within the SIP protocol that does not require credentials to be transmitted over the network in clear text. The password is sent to the realm of the client in hashed form. Initial authentication occurs when the server challenges the client. The client uses the challenge from the server to generate a password hash that is put into the response to the server. The advantage of Digest authentication over Basic authentication is that an hashed password is sent over the network. The hashed password, however, may be deciphered by network attackers if the password is weak.