Alexey Melnikov wrote:
> I can do 2617 update, but I am not an HTTP expert
either.
> So I would need a co-editor, who is.
Maybe ask Phil. One detail that's IMO not
"obvious" is an
exact definition when a 2069-fallback is required for a
general purpose DIGEST-AUTH implementation. I tried to
get away with "certainly not for a given qop or
md5-sess".
But that's guesswork, I could as well take "not if
CNONCE
isn't empty", or similar combinations.
Frank
_______________________________________________
Ietf-http-auth mailing list
Ietf-http-auth osafoundation.org
http://lists.osafoundation.org/cgi-bin/mai
lman/listinfo/ietf-http-auth
|