Re: Digest authentication

• From: <wmperry@spry.com>
• Date: Wed, 26 Apr 95 16:29 PDT
• To: Mike Cowlishaw <mfc@vnet.ibm.com>
• Cc: http-wg%cuckoo.hpl.hp.com@hplb.hpl.hp.com
• Message-Id: <m0s4GWI-00000EC@monolith>

Mike Cowlishaw writes:
> Good to see it works.  Question: why is the 'opaque' field part of
> the WWW-Authenticate: header?  It would seem to be generally useful,
> independent of authentication, and therefore perhaps merits a header
> of its own:
> 
>   Opaque: 34e1....3c81

  I wondered that myself.  It would dovetail nicely with either the
'Session-ID' or 'Cookie' proposals.

-Bill P.

Received on Wednesday, 26 April 1995 20:53:46 UTC