Seen on Simon Willison's weblog:

http://pajhome.org.uk/crypt/md5/index.html

Combine it with "form tokens" and you have a nice auth method (for
situations where SSL is not an option).

  Neil