- From: Thomson, Martin <Martin.Thomson@commscope.com>
- Date: Fri, 21 Oct 2011 06:43:25 +0800
- To: Willy Tarreau <w@1wt.eu>, Dan Anderson <dan-anderson@cox.net>
- CC: "ietf-http-wg@w3.org" <ietf-http-wg@w3.org>
On 2011-10-21 at 05:46:31, Willy Tarreau wrote: > In my opinion, everything related to client authentication easily > falls in the 4xx class. It means "I won't perform this request unless > you do something on your side", which is the case. The problem with 4xx is that it implies an error in the client. But to imply that the "client" in this case - an _HTTP_ client - can do anything about the network authentication situation is where this line of reasoning falls down. To infer fault in either HTTP client or HTTP server is disingenuous. What we are looking for an "act of god" series (c.f. insurance contracts): Nothing in inherent in the request (client) or the identified resource (server) caused this request to fail. I'm reluctant to open the 6xx series for this sort of marginal case. Looking at the commonly induced behaviour in these cases suggests 3xx (with or without Location:). I'll freely admit that it's still weak, but it does avoid the more obvious pitfalls. --Martin
Received on Thursday, 20 October 2011 22:50:33 UTC