This uses local Windows users and groups to authenticate. It can be sub-classified into:
- Basic authentication: Usernames and passwords are sent as Base64-encoded strings and hence can be easily cracked, so it's a very weak form of authentication and should not be used.
- Digest authentication: Issues with basic authentication are solved with digest authentication and the data sent is MD5 hashed. This hashed message is not easy to decipher. However, some browsers don't support it.
- Integrated authentication: Kerberos authentication or NT LAN Manager (NTLM) authentication. This is the best of the lot, in terms or security as well as support.
Windows authentication is still supported in ASP.NET Core 2.0, but since it is ...
