W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2009

Re: [#177] Realm required on challenges

From: Alexey Melnikov <alexey.melnikov@isode.com>
Date: Tue, 07 Jul 2009 09:29:11 +0100
Message-ID: <4A530757.2@isode.com>
To: Adrien de Croy <adrien@qbik.com>
CC: Mark Nottingham <mnot@mnot.net>, Robert Collins <robertc@robertcollins.net>, HTTP Working Group <ietf-http-wg@w3.org>
Adrien de Croy wrote:

> I've never seen an NTLM challenge (or Negotiate) with a realm 
> parameter.  Realm isn't referred to in RFC 4559 either.
>
> I question the validity of requiring that realm be a parameter of 
> every (even new) scheme that has a challenge.

I tend to agree that the realm shouldn't be required.

> I've never seen a browser use the realm for anything other than a 
> label in a dialog box either.

It is also used for hash computations (at least for Digest).
Received on Tuesday, 7 July 2009 08:30:40 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:07 GMT