Re: opaque parameter in the Authorization request header

From: Frank Ellermann <nobody@xyzzy.claranet.de>
Date: Wed, 13 Aug 2008 20:41:28 +0200
To: ietf-http-wg@w3.org
Message-ID: <g7v9r1$4ae$1@ger.gmane.org>

Henrik Nordstrom wrote:

> there really is no excuse for not returning it

+1

I've no idea why RFC 2069 settled for a "should"
instead of a "must" here.  It could mean that
servers aren't forced to insist on its presence,
but if they insist on it they are not violating
the spec.  

 Frank

Received on Wednesday, 13 August 2008 18:41:23 UTC