Jackie - Upgrade HTTP Digest from RFC2617 to RFC7616

layout: fr
title: Jackie - Upgrade HTTP Digest from RFC2617 to RFC7616
author: Jackie PyXMR2025
date: September 12, 2026
amount: 11.10
milestones:
  - name: 56.0 hours
    funds: 3.7
    status: unfinished
    done:
  - name: 56.0 hours
    funds: 3.7
    status: unfinished
    done:
  - name: 56.0 hours
    funds: 3.7
    status: unfinished
    done:
payouts:
  - date:
    amount: 3.7
  - date:
    amount: 3.7
  - date:
    amount: 3.7

Summary

This proposal aims to migrate monerod’s built‑in HTTP Digest RPC authentication from the existing RFC 2617 to RFC 7616. RFC 7616 obsoletes RFC 2617 and represents the current active standard for HTTP Digest authentication. The migration will maintain full backward compatibility with existing clients.

Purpose

This change enables the use of HA1 hash credentials in place of plain‑text rpc‑login, eliminating plain‑text password storage. It mitigates security risks associated with the MD5 algorithm and reduces exposure to password leaks originating from compromised configuration files.

Links

• RFC 2617: https://www.rfc-editor.org/info/rfc2617
• RFC 7616: https://www.rfc-editor.org/info/rfc7616
• monero-project/monero/contrib/epee/src/http_auth.cpp
• PyXMR2025/monero/tree/rpcauth

Translated by LLM

Proposal

168 hours. at a rate of 25$ / hour. At 380.91$ / XMR (90-day EMA) this makes ~11.10 XMR.