Re: RFC 2617 Authentication-Info BNF

On Mon, 1 Oct 2007 17:24:10 -0700
Paul Leach <paulle@windows.microsoft.com> wrote:

> The "nextnonce" is optional. To see why, ask yourself if
>         Authentication-Info rspauth="ab10f00baa"
> is legal according to the ABNF. Hint -- what does "1#" mean?
>

ok, I understand that technically.  But what is the purpose of having
square brackets around the other directives, but not around nextnonce? 

> 
>         AuthenticationInfo = "Authentication-Info" ":" auth-info
>         auth-info          = 1#(nextnonce | [ message-qop ]
>                                | [ response-auth ] | [ cnonce ]
>                                | [nonce-count] )
> 
> 

Thanks,
Tim