Re: userinfo in :authority

• From: Martin Thomson <martin.thomson@gmail.com>
• Date: Tue, 7 Jan 2014 11:56:47 -0800
• To: Bjoern Hoehrmann <derhoermi@gmx.net>
• Cc: Amos Jeffries <squid3@treenet.co.nz>, HTTP Working Group <ietf-http-wg@w3.org>
• Message-ID: <CABkgnnXv5X24mBXOHkrmVJRm5PPQ_8uP55kPeOc_ieinDiF-iw@mail.gmail.com>

On 7 January 2014 04:44, Bjoern Hoehrmann <derhoermi@gmx.net> wrote:
> It ought to be made clear that this is a non-HTTP feature though, the
> use of `userinfo` with `http:` and `https:` has always been disallowed.


So, the question is begged: do we want to permit the requesting of
resources identified by URIs other than "http:" or "https:"  I think
that we can, but I'd prefer to add an exception in the form MUST
unless non-http/https if we do, which would allow for those other uses
without opening the door for userinfo in http URIs.

Received on Tuesday, 7 January 2014 19:57:15 UTC