Internet - Draft HTTP Digest AKAv 2

HTTP Digest is known to be vulnerable to man-in-the-middle attacks, even when run inside TLS, if the same passwords are used for authentication in some other context without TLS. This is a general problem that affects not just HTTP digest but also other IETF protocols. However, for a class of strong algorithms the attack is avoidable. This document defines version 2 of the HTTP Digest AKA algorithm. Unlike previous versions of HTTP Digest such as MD5 or AKAv1, this algorithm is immune to the man-in-the-middle attack.