W3C home > Mailing lists > Public > ietf-http-wg-old@w3.org > January to April 1998

Re: Digest Authentication: nc=

From: Scott Lawrence <lawrence@agranat.com>
Date: Wed, 29 Apr 1998 10:11:10 -0400 (EDT)
To: Dave Kristol <dmk@research.bell-labs.com>
Cc: http-wg@cuckoo.hpl.hp.com, http-wg@hplb.hpl.hp.com
Message-Id: <Pine.LNX.3.96.980429101023.26483A-100000@alice.agranat.com>

On Wed, 29 Apr 1998, Dave Kristol wrote:

> In my implementation of Digest, I don't verify that a given nonce count
> (nc=) has appeared only once.  My server simply doesn't retain that
> kind of state.
> 
> So I'm wondering, *is* anyone planning to implement checks on reuse
> of nc?

  Our internal nonce handling already has a nonce use count, so yes, I
expect that when I do this I'll be checking it.
Received on Wednesday, 29 April 1998 07:14:19 EDT

This archive was generated by hypermail pre-2.1.9 : Wednesday, 24 September 2003 06:33:15 EDT