title: Windows Explorer connect to webdav but require authorization
body: <p>I have a problem where I can't seem to find any solution.</p>
  
  <p>I have a web application which uses webdav so I can connect to it via windows explorer and edit files. This works.</p>
  
  <p>Now I want to use <strong>authentication</strong> with this folder. I already did this via a servlet filter with <em>BASIC Authentication</em> and <em>DIGEST Authentication</em> which both work fine, when the password is at some point available in cleartext.  </p>
  
  <p>The problem is that my <strong>passwords</strong> are stored in a <strong>hashed format</strong> in my sql database.</p>
  
  <p>With <strong>BASIC Authentication</strong> i can compare the user pass with the database because it is transmitted in <strong>cleartext</strong>. <strong>I don't want that</strong>.
  When I use DIGEST Authentification the pasword is transmitted in encrypted format and the password is needed in cleartext from the database to calculate the response. Since the password is already hashed there is no way to calculate a valid response.</p>
  
  <p>I <strong>also checked Negotiate/Spnego/ntlm</strong> authorization but as far as I understand these are for windows users only and don't have anything to do with my sql database.
  The database is either mysql, mssql or postgre.</p>
  
  <p>Are there <strong>any other</strong> authentication mechanisms that work with <strong>windows explorer</strong>, where I can make it at least a little bit harder to decrypt the password so it won't be sent in cleartext?</p>