W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2009

Re: [#177] Realm required on challenges

From: Thomas Broyer <t.broyer@gmail.com>
Date: Tue, 7 Jul 2009 11:34:24 +0200
Message-ID: <a9699fd20907070234v19fb9a6cu9ab1ebe0720b45d6@mail.gmail.com>
To: Adrien de Croy <adrien@qbik.com>
Cc: HTTP Working Group <ietf-http-wg@w3.org>
On Tue, Jul 7, 2009 at 11:00 AM, Thomas Broyer wrote:
>
> See http://ltgt.net/tests/http-auth-realm/
>
> I tested it in IE8, Firefox 3.5, Opera 9.64, Safari 4 and Chrome
> 3.0.191.3 (Dev channel), all on Windows.
> Only Chrome fails the test and do not ask for your credentials when
> going from Foo to Bar the first time; all others take the realm into
> account when storing the credentials for use in subsequent requests;
> realm is not just a label in a dialog box.

Oops! it depends on the cache actually!

Re-tested in Chrome 2.0.172.33 and Chrome 3.0.191.3 with a clean cache
(in the mean time, I added a Cache-Control: private on the foo and bar
responses), they behave as expected (ask your credentials when
changing realm).

Tested successfully in IE6 and IE7 too.

-- 
Thomas Broyer
Received on Tuesday, 7 July 2009 09:35:20 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:07 GMT