Re: i24: Requiring Allow in 405 responses

Mark Nottingham wrote:
> 
> 
> On 28/02/2008, at 11:26 PM, Julian Reschke wrote:
> 
>> It seems to me it would be unwise to say "clients SHOULD believe the 
>> Allow header", but "servers MAY leave of methods".
>>
>> If we relax the requirement for the production, we also need to relax 
>> the requirement for the recipient.
> 
> 
> How about
> 
> Clients SHOULD believe the Allow header
> Servers SHOULD send a complete Allow header
> 
> with weasel words on both sides to clarify that the client may try other 
> ones in cases where it has external information / has explicit user 
> input, and the servers may leave off methods for security, access 
> control, or implementation reasons?

I think that's what we need to say.

BR, Julian

Received on Friday, 29 February 2008 10:35:47 UTC