RE: RFC 2617 Authentication and character sets revisited

Scott Lawrence [mailto:scott-http@skrb.org] wrote:

> "Yngve N. Pettersen (Developer Opera Software ASA)" 
> <yngve@opera.com> writes:
...
> > Personally, of course, I'd prefer that UTF-8 is endorsed as 
> > the character set.
> 
> Actually, I think this choice would be backward-compatible for those
> cases that have been working, and incompatible only with those that
> previously would have had interoperability problems anyway (passwords
> that had values outside the ASCII range).

I concur with this analysis. I also would strongly prefer the
specification of UTF-8 encoding for the purposes of calculating H(A1).

/a