Re: Past Proposals for HTTP Auth Logout

Tim wrote:
> I'm doing some research and I'm interested in learning about any past
> proposals to augment HTTP authentication (basic/digest) with a logout
> feature.  I have spent several hours reading mailing list archives and
> searching the web, and while I've found plenty of related information,
> I'm surprised to find no concrete proposals for this feature.

I don't see how that concerns HTTP; it's a missing feature on the browsers.

Credentials are sent on every request. All you need is a logout button on 
the *browser* that makes it stop sending credentials. Go file feature 
requests to the browser vendors :)

-- 
Nicolas

(I read mailing lists through Gmane. Please don't Cc me on replies; it makes 
me get one message on my newsreader and another on email.)

Received on Thursday, 7 January 2010 21:41:53 UTC