Search RFCs Advanced Search RFC Editor RFC 2617 HTTP Authentication: Basic and Digest Access Authentication, June 1999 File formats: Status:DRAFT STANDARD Obsoletes:RFC 2069 Obsoleted by:RFC 7235, RFC 7615, RFC 7616, RFC 7617 Authors:J. FranksP. Hallam-BakerJ. HostetlerS. LawrenceP. LeachA. LuotonenL. Stewart Stream:IETF Source:http (app) Cite this RFC: TXT | XML | BibTeX DOI: https://doi.org/10.17487/RFC2617 Discuss this RFC: Send questions or comments to the mailing list iesg@ietf.org Other actions: View Errata | Submit Errata | Find IPR Disclosures from the IETF | View History of RFC 2617 Abstract This document provides the specification for HTTP's authentication framework, the original Basic authentication scheme and a scheme based on cryptographic hashes, referred to as "Digest Access Authentication". [STANDARDS-TRACK] For the definition of Status, see RFC 2026. For the definition of Stream, see RFC 8729. Document RetrievalErrataFrequently Asked QuestionsFuture Format FAQHistoryAbout UsOther InformationPublication ProcessPublication QueueStyle Guide Advanced Search