W3C home > Mailing lists > Public > ietf-http-wg-old@w3.org > May to August 1996

Re: HTTP/1.1 + Digest

From: Daniel DuBois <dan@spyglass.com>
Date: Tue, 27 Aug 1996 09:53:25 -0700
Message-Id: <2.2.32.19960827165325.009cf92c@rafiki.spyglass.com>
To: "David W. Morris" <dwm@shell.portal.com>, http working group <http-wg%cuckoo.hpl.hp.com@hplb.hpl.hp.com>
At 01:31 AM 8/27/96 -0700, David W. Morris wrote:
>design point to support BASIC w/o DIGEST. SHOULD support DIGEST provides
>an opportunity for carefully reasoned escape where other features are
>probably worth more of the implementation effort. 

We all know exactly what we're talking about here:

"SHOULD" is clearly not going to get Netscape to support Digest.  As long as
Netscape doesn't support Digest, people will be shipping their passwords
around in clear text for years to come.  The only thing that we can *hope*
will get Netscape to support Digest is the threat of slapping "HTTP/1.1
uncompliant" on them publicly and hope it shames them into supporting it.
So that's what we're doing.  Bad reasoning?  Bad precedent?  Bad form?  All
these things and more I'm sure, but the end justifies the means.

-----
Daniel DuBois, Traveling Coderman -- NEW! http://www.spyglass.com/~ddubois/
         Roses are red, violets are blue, this .sig doesn't rhyme.
Received on Tuesday, 27 August 1996 09:58:55 EDT

This archive was generated by hypermail pre-2.1.9 : Wednesday, 24 September 2003 06:32:08 EDT