Digest Authentication is something like this:
- Server sends client a nonce.
- Client hashes username and password with nonce.
- Client sends hashed value back to server.
- Server validates hash.
However, it seems like this requires the server to have access to the password plaintext, otherwise it wouldn't be possible to verify each hash with unique nonce values.
Is there some way to follow this authentication protocol without requiring the server to have access to password plaintexts?