Digest auth is a fair bit harder to implement on both the client and the server side. It should be using SSL and client certificates, but that’s just a major PITA. Either that, or unix sockets.
Re: JSON-RPC password
Figures: lachesis
lachesis July 25, 2010 21:00 UTC