Re: RFC2616 vs RFC2617, was: Straw-man charter for http-bis

On 08/06/2007, at 6:10 PM, Stephane Bortzmeyer wrote:

>
> On Thu, Jun 07, 2007 at 06:18:13PM +0200,
>  Julian Reschke <julian.reschke@gmx.de> wrote
>  a message of 14 lines which said:
>
>> In the wild, most authentication isn't using RFC2617 anyway.
>
> Any data here? IMHO, this assertion is not true, unless you limit to
> big e-commerce Web sites. For instance, HTTP-based Web services use
> 2617.

My experience is that it isn't adequate for even those purposes, in  
many cases.

--
Mark Nottingham     http://www.mnot.net/