title: Firefox asks for username/password on every HTTP request with Digest Authentication enabled on IIS6
body: <p>I've recently enabled Digest Authentication on an intranet website/application I am creating for my company in ASP.NET.</p>
  
  <p>The reason I have done so is because Windows Authentication seemed to only work for some users, and not for others. I could not figure out why nor do I know enough about IIS to try and trace the issue. After some trial and error, I found that digest authentication seemed to give me the behaviour that I wanted. That is: allow only users with a valid account on the domain to log in to the website with their credentials.</p>
  
  <p>The problem now, is that Firefox (3+) seems to ask for the user to authenticate on every HTTP request sent to the server. This does not appear to occur in Internet Explorer (6+) or Chrome.</p>
  
  <p>I've tried searching for solutions but I always arrive at dead-ends. I'll find a discussion about the issue, and every posted solution leads to a dead link...or it's on Experts Exchange and I don't have access to view to solution.</p>
  
  <p>The issue appears to be related (from what I've read) to the way the different browsers send their authentication headers vs how IIS interprets them. I'm not sure what I can do to change this though? One of the solutions I had found mentioned writing an ISAPI filter to fix this, but of course the link to the finished filter was broken and I have no idea how to go about making one myself.</p>
  
  <p>I've tried messing with the NTLM and other auth related strings in about:config to try and force Firefox to trust my server but that doesn't seem to work either.</p>
  
  <p>From a few other sources I've read, it appears that everything <em>should</em> work if I switch back to Windows Authentication, but then I'm back at square one where the authentication would work only for some users and not others.</p>
  
  <p>A solution for either problem would work for me, but I have very little information for the Windows Authentication issue. If someone could guide me through tracing the problem I'd gladly post more information for it as well.</p>
  
  <hr />
  
  <p>Here are the URLs I've found discussing what seems like the same problem. (Sorry I couldn't make them all links, it wouldn't let me post otherwise)</p>
  
  <ul>
  <li>support.mozilla.com/tiki-view_forum_thread.php?locale=pt-BR&amp;forumId=1&amp;comments_parentId=346851</li>
  <li>www.experts-exchange.com/Software/Internet_Email/Web_Browsers/Mozilla/Q_24427378.html</li>
  <li>channel9.msdn.com/forums/TechOff/168006-Twin-bugs-in-IIS-IE-unfair-competitive-advantage-EDIT-SOLVED/</li>
  <li>www.derkeiler.com/Newsgroups/microsoft.public.inetserver.iis.security/2006-03/msg00141.html</li>
  </ul>