Question

Conduct online research on web authentication and define what it is. Describe different authentication methods

Answer 1

Authentication is the process of verifying the identity of a user who tries to access resources, data, or applications. One authentication method involves using HTTP. The three types of authenticating protocols are as follow:

Basic authentication: This widely used authentication method collects user name and password information. The authentication process sends and receives information in text format. The data is coded, but not encrypted. All browsers support basic authentication. However, there is no guarantee of confidentiality or encryption of data in transit, because it is based on the username and password—there are no cookies and no real session data. It just ensures that the username and password meet the requirements or match what is saved, and that’s it.

Digest authentication: Direct authentication offers the same features that basic authentication does, but it is a more secure way of sending or receiving authentication credentials. Digest authentication is not supported by all browsers, because it uses HTTP 1.1 protocol. This authentication only works in Windows domains.

Integrated (NTLM) authentication: This authentication method uses more secure forms of authentication, such as NTLM, Kerberos, and Negotiate mechanisms. NTLM hashes all credentials and then sends them to networks.

Step-by-step explanation:

Edmentum/Plato :))

Answer 2

It is a standard norms of web designed and governed by “W3c” (World Wide Web consortium). The idea of this is to authenticate user using public-key cryptography. Simply it is a way to handle security system in web based mode.

1. Cookie based authentication – This serves has the default method of authentication.

2. Token based: If you need security access only for web application and not mobile, this is preferable

3. Open ID

4. Third party access

5. SAML – If you want “single sign-on” go for this method of authentication

OTP is also one of the method of authentication.