title: http or https authentication for Intranet Web applications
body: <p>I’m developing an Intranet application and I want to make a secure authentication. </p>
  
  <p>One approach can be use “https”. The problem is that the server doesn’t have a trusted certificate, therefore is a bit annoying for the client because the browser doesn’t trust in the certificate and complaints with a scary message. </p>
  
  <p>Using http will compromise the user password but it can be combined with <a href="http://en.wikipedia.org/wiki/Digest_access_authentication" rel="noreferrer">“Digest access authentication</a>”</p>
  
  <p>What do you think?</p>