There are times when a "micro framework" is actually useful. I wasn't easily convinced that this could be true. Big framework or die trying. Right? Maybe not so right. My primary example of a micro framework's value is a quick demo site to show how some API's are going to …

It seems so simple: use the HTTP Digest Authorization with the Quality of Protection set to "auth".

It's an easy algorithm. A nonce that encodes a timestamp can be used to be sure no one is attempting to cache credentials. It's potentially very, very nice.

Except for one thing: Apache …