The mixture of HTTP 1.0 and 1.1 is already fixed in 1.3.14.

Yesterday i posted a patch on the mailing list to support RFC 2617.
I got a positive response from Michael Tarkowski, saying his former problem is solved with the patch applied.

The patch is backward compatible with RFC 2069 (server does not send qop). Any other than qop='auth' or algorithm=MD5 is not supported so far. But that should cover 95% of all use cases.

The patch is not in the git yet.

Wget uses some funny mixture from HTTP/1.0 and
obsolete Digest Access Authentication from RFC 2069
instead actual RFC 2617 and HTTP/1.1

--------------------------------------------------
Log for wget:
wget -t 1 --http-user=root --http-password=pass http://localhost:8008/dir.txt

GET /dir.txt HTTP/1.0
connection: Keep-Alive
host: localhost:8008
accept: /
user-agent: Wget/1.12 (linux-gnu)

Responce: HTTP/1.0 401 Unauthorized
WWW-Authenticate: Digest realm="Mobile
web",qop="auth",domain="/",nonce="9FE62FF7754C7986F7F67162E4717814"
Content-Type: text/html
Content-Length: 210
Connection: Keep-Alive
Keep-Alive: timeout=3, max=100

GET /dir.txt HTTP/1.0
authorization: Digest username="root", realm="Mobile web",
nonce="9FE62FF7754C7986F7F67162E4717814", uri="/dir.txt",
response="ded7bb3affcf0f91bfe18dd443a7ffed"
connection: Keep-Alive
host: localhost:8008
accept: /
user-agent: Wget/1.12 (linux-gnu)
Authentication failed:
md5(cd4dec95ec0056cdd5c130076ee3fe3e:9FE62FF7754C7986F7F67162E4717814:::auth:13be09fe00f018b919d8373bad8a0417)
!=ded7bb3affcf0f91bfe18dd443a7ffed

Responce: HTTP/1.0 401 Unauthorized
WWW-Authenticate: Digest realm="Mobile
web",qop="auth",domain="/",nonce="F7A81D8051617E2C322E85E7F966320D"
Content-Type: text/html
Content-Length: 210
Connection: Keep-Alive
Keep-Alive: timeout=3, max=100

ps: ded7bb3affcf0f91bfe18dd443a7ffed =
md5(cd4dec95ec0056cdd5c130076ee3fe3e:9FE62FF7754C7986F7F67162E4717814:13be09fe00f018b919d8373bad8a0417)

--------------------------------------------------
Log for Mozilla:

GET /dir.txt HTTP/1.1
authorization: Digest username="root", realm="Mobile web",
nonce="30206BADD9E5F56EA69EA96B871BDE40", uri="/dir.txt",
response="5b09228d6c1d87cdaa1eb4fbe8fd8a7c", qop=auth, nc=00000003,
cnonce="59e2e4701161e042"
if-none-match: 5373326-734421-46485
connection: keep-alive
keep-alive: 300
accept-charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
accept-encoding: gzip,deflate
accept-language: en-us,en;q=0.5
accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
user-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.16)
Gecko/20101227 Conkeror/0.9.2 (Debian-0.9.2+git100804-1)
host: localhost:8008
forget nonce 30206BADD9E5F56EA69EA96B871BDE40
Authentication failed: stale

Responce: HTTP/1.1 401 Unauthorized
WWW-Authenticate: Digest realm="Mobile
web",qop="auth",domain="/",stale="true",nonce="4B8E9B93A657D935A0DCB3DD5C5FBD9A"
Content-Type: text/html
Content-Length: 210
Connection: Keep-Alive
Keep-Alive: timeout=3, max=100

GET /dir.txt HTTP/1.1
authorization: Digest username="root", realm="Mobile web",
nonce="4B8E9B93A657D935A0DCB3DD5C5FBD9A", uri="/dir.txt",
response="b16350801eabc5e73ea2e042af5f4195", qop=auth, nc=00000001,
cnonce="670e5b31cbb7716d"
if-none-match: 5373326-734421-46485
connection: keep-alive
keep-alive: 300
accept-charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
accept-encoding: gzip,deflate
accept-language: en-us,en;q=0.5
accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
user-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.9.1.16)
Gecko/20101227 Conkeror/0.9.2 (Debian-0.9.2+git100804-1)
host: localhost:8008

Responce: HTTP/1.1 200 Ok
Authentication-Info: nextnonce="EA69F30661F022C6F2B67685EDFF063F",
rspauth="94e484f6d993fd6554affb7b206d4d3d", cnonce="670e5b31cbb7716d",
nc=00000001, qop="auth"
ETag: 5373326-734421-46485
Content-Type: text/plain
Content-Length: 5373326

http://bugs.debian.org/609836