users@jersey.java.net

Re: [Jersey] DIGEST Authentication with Jersey client

From: Witold Szczerba <pljosh.mail_at_gmail.com>
Date: Tue, 8 Jun 2010 13:54:36 +0200

2010/6/3 Raphaƫl Jolivet <raphael.jolivet_at_gmail.com>:
>
>
> Hi there,
>
> I have written a REST web service with Jersey Server (that totally rocks !).
> I am now developing the client part of it, with Jersey Client as well.
>
> On the server side, I have chosen a DIGEST authentication, because I
> personally think that BASIC authentication is an heresy that should be
> marked as "DEPRECATED" in our heads.

As far as I know, BASIC authentication is secure enough when it goes
over SSL. It is even better than DIGEST over plain HTTP because SSL
protects not only the password, but the content as well.