authentication-02: digest-challenge order

     digest-challenge  = 1#( realm | [ domain ] | nonce |
                         [ opaque ] |[ stale ] | [ algorithm ] |
                         [ qop-options ] | [auth-param] )

I'm just a tad nervous that an implementor might assume that "realm"
will be the first auth-param in a digest-challenge, based on

- analogy to Basic (which has only one auth-param)
- the fact that "realm" is listed first in the syntax

Is it worth adding a note that the syntax for digest-challenge allows
the auth-param's to appear in any order?  There other places in this
spec. where we say, in effect, "don't be stupid", so there is precedent.

Dave Kristol

Received on Thursday, 20 August 1998 12:03:40 UTC