Re: [#177] Realm required on challenges

Adrien de Croy wrote:

> I've never seen an NTLM challenge (or Negotiate) with a realm 
> parameter.  Realm isn't referred to in RFC 4559 either.
>
> I question the validity of requiring that realm be a parameter of 
> every (even new) scheme that has a challenge.

I tend to agree that the realm shouldn't be required.

> I've never seen a browser use the realm for anything other than a 
> label in a dialog box either.

It is also used for hash computations (at least for Digest).