A guide to phrases and concepts that readers may find helpful in understanding and writing materials related to user authentication and password security issues. The focus is on basic authentication and digest authentication for password protection of http services as applied to Microsoft IIS.

account
account deletion
account lockout
account lockout policy
account suspension
active directory
administrative alerts
affiliate feeder
apache server
authenticated session
authentication control engine
authentication credentials
authentication dialogue
authentication domain
authentication gateway
authentication management
authentication protocols
authentication request
authentication response
authentication services
authorised user
autobot
autodownloader
automated attack
automated password cracker
bandwidth protection
bandwidth spike
base64 mime encoding
basic authentication
browser cookie
brute forcing
builtin account
builtin administrator account
class c subnet
clear text
client access licenses
client browser
clusters or arrays of web servers
communication protocol
content protection
custom login form
defense as a process
defensive regime
denial of service
digest authentication
disk thrashing
employee portal
gateway page
hot-linking
http
http daemon
http/1.0
http/1.1
http/1.1 digest authentication
http-referer
https
ietf
iis
isa server reverse cache
isapi
isapi authentication filter
isapi filter
load balance
md5 hash
membership site
memory resident database
meta-refresh directives
mmdb
network sniffing
one-time throwaway access ticket
open source
opportunistic authentication
paging
paid subscription site
partitioned authentication
partner portal
password
password cracker
password hurler
password lockout
password protection
password recovery
password sharing
password trader
peer review
performance bottleneck
physical memory
private network
protected materials
protected zone
protection scope
proxy server
public network
redirect
reversible encryption
rfc
robot
sam user database
scalability
scalable
scale out
scale up
scaling characteristics
searchbot
secure password storage
security architecture
security community
security practitioner
seed
self tuning memory management
service outage
session bandwidth
session independence
session state
site accelerator
sql
ssl/tls
stateless
subscription membership site
syndicated content
tarpit
third party audit
third party authentication
unauthenticated user
uri
url
user authentication
user authorization
user data store
user sessions
virtual gateway page
virtual memory
web application
web farm
web server
www services