W3C home > Mailing lists > Public > ietf-http-wg-old@w3.org > May to August 1998

RE: Digest Authentication Challenge Ordering

From: Paul Leach <paulle@microsoft.com>
Date: Fri, 7 Aug 1998 00:57:14 -0700
Message-Id: <CB6657D3A5E0D111A97700805FFE65875D742A@red-msg-51.dns.microsoft.com>
To: "'http-wg@hplb.hpl.hp.com'" <http-wg@hplb.hpl.hp.com>
I propose that the user-agent MUST choose the strongest auth-scheme it
understands. This permits the server to put Basic first for old browsers (if
it finds Basic acceptably secure). The order really doesn't matter, since
the server is only supposed to offer minimally acceptable schemes.
Received on Friday, 7 August 1998 00:59:07 EDT

This archive was generated by hypermail pre-2.1.9 : Wednesday, 24 September 2003 06:33:19 EDT