Mock Exam Quesion

[Ram Venkat]

Identify the authentication techniques that are based on builtin mechanisms of HTTP.

Select 2 correct options
a HTTP does not have any built in mechanism for authentication.
It does - BASIC.

b BASIC


c CLIENT-CERT


d DIGEST


e FORM

My Choices are b & e.

But it's showing in answer key as b & d.

advice on this

[Christophe Verré]

The HTTP protocol only offers the following mechanism :

HTTP Basic Authentication

HTTP Digest Authentication

You can refer to this RFC. Client authentication is HTTPS, and form authentication is servlet specific.