Re: [Phpgroupware-developers] md5 question

[Guillaume Courtois]

>>But if md5(username).md5(password).md5(nonce) = md5(username.password.nonce), 
>>I
>>can get md5(password) as I have all the other fields ...
>I really doubt that this would be true.

Me too :-(

>So nonce is something that would change every time like a session ID or 
>something?

That's not very clear in the specs, but as I understand it it's more like a 
chain to identify the syncml-server ... It could change everytime, but the 
other syncml servers seem to use the "URL redirect" functionnality to identify 
the different sessions with the clients.