Re: security requirements (was: Updating RFC 2617 (HTTP Digest) to use UTF-8) from Robert Sayre on 2006-10-18 (ietf-http-wg@w3.org from October to December 2006)

From: Robert Sayre <sayrer@gmail.com>
Date: Wed, 18 Oct 2006 14:32:48 -0400
To: "Julian Reschke" <julian.reschke@gmx.de>
Cc: "Roy T. Fielding" <fielding@gbiv.com>, "HTTP Working Group" <ietf-http-wg@w3.org>
Message-ID: <68fba5c50610181132k7d2ca719hbb7f696bc898cdf8@mail.gmail.com>

On 10/18/06, Julian Reschke <julian.reschke@gmx.de> wrote:
> Roy T. Fielding wrote:
> >
> > So, if anyone thinks that a secure authentication scheme is a cool
> > thing, they should propose one and eventually update RFC 2617 to
> > include it, at which point it will be an OPTIONAL secure auth
> > mechanism for HTTP/1.1
>
> I think that makes it clear that a revision of HTTP/1.1 can't make that
> change

I agree.

-- 

Robert Sayre

Received on Wednesday, 18 October 2006 18:32:54 UTC