Re: Digest Authentication (Broken in many Browsers)

On Jul 12, 2006, at 11:42 AM, Joe Orton wrote:

> On Wed, Jul 12, 2006 at 02:47:59PM +0000, John C. Mallery wrote:
>> Few browsers seem to have implemented HTTP 1.1 Digest Authentication
>> correctly, at least on the Mac.
>>
>> Digest authentication of proxy requests seems to be a major problem
>> area.
>>
>> Firefox 2.0b1 seems to be the best implementation on the mac.
>>
>> 1. I note, however, that it computes the digest based on the relative
>> URI of the absolute URI requested of the proxy.
>
> I think this is a post-1.5 regression in Firefox,

Actually, this is similarly broken in firefox 1.5 and Mozilla too.

> we had a similar
> report with similar details filed against mod_auth_digest:
>
> http://issues.apache.org/bugzilla/show_bug.cgi?id=37959

Did they ever fix it?

Received on Wednesday, 12 July 2006 18:36:34 UTC