Re: Straw-man charter for http-bis

> Taking a step back, what needs attention from the best of minds is
> 2617. Let's face it: http authentication is awkward and compared to
> the rest of the protocol it feels like a child's toy, sitting in the
> glove compartment of a BMW.
very much agree.  HTTP authentication as it currently exists is nearly
useless, and forms-and-cookie authentication (at least as it tends to be
implemented) isn't sufficient.