documentation_complete: true

prodtype: rhel7

title: 'Disable HTTP Digest Authentication'

description: |-
    The <tt>auth_digest</tt> module provides encrypted authentication sessions.
    If this functionality is unnecessary, comment out the related module:
    <pre>#LoadModule auth_digest_module modules/mod_auth_digest.so</pre>

rationale: |-
    Minimizing the number of loadable modules available to the web server reduces risk
    by limiting the capabilities allowed by the web server.

severity: unknown

identifiers:
    cce@rhel7: 80304-9
