How do I authenticate across multiple (AD) domains on IIS 6 using digest authentication? Is the domain that the server resides on the only authenticate-able domain?
While MS documentation isnt particularly clear in this point, making some search we see on Autentification Methods on IIS:
So, if you look for integrated method, there's posts where explains that multidomain access is correct if you have a trust relationship between those domains. MultiDomain IIS
I think we can suppose that Multidomain works with digest method with trust relations between domains, based on MS info
Question: Can't you switch to integrated to use Kerberos and improve security? MD5 is quite easy to crack.
Hope this helps.