W3C home > Mailing lists > Public > ietf-http-wg@w3.org > July to September 2011

Re: #177: Realm required on challenges

From: Adrien de Croy <adrien@qbik.com>
Date: Mon, 25 Jul 2011 19:42:43 +1200
Message-ID: <4E2D1E73.2070400@qbik.com>
To: Amos Jeffries <squid3@treenet.co.nz>
CC: ietf-http-wg@w3.org


On 25/07/2011 7:34 p.m., Adrien de Croy wrote:
>
>
> On 25/07/2011 6:21 p.m., Amos Jeffries wrote:
>> Really? what browsers respond to Proxy-Auth challenges when they 
>> explicitly contacted the origin directly?
>
> all of them do.  They don't know they are being intercepted by a 
> proxy.  They just think the site challenged them.

sorry - to clarify, we don't challenge an intercepted connection with 
407 + Proxy-Authorize.  That would be pointless since the client has no 
knowledge of the proxy.

We of course respond with 401 + WWW-Authorize.

Adrien


-- 
Adrien de Croy - WinGate Proxy Server - http://www.wingate.com
Received on Monday, 25 July 2011 07:43:25 GMT

This archive was generated by hypermail 2.2.0+W3C-0.50 : Friday, 27 April 2012 06:51:46 GMT