It is normal, that digest, need session data from webserver. So it connects to webserver, gets the data and can now send the complete session as normal known from requests. The current implementation will on every request challenge the digest auth and this is not wrong, but could be better not to do so. Maybe need to write the own challenging.