W3C home > Mailing lists > Public > ietf-http-wg@w3.org > October to December 2011

Re: #320: add advice on defining auth scheme parameters

From: Mark Nottingham <mnot@mnot.net>
Date: Mon, 31 Oct 2011 14:05:19 +1100
Cc: Julian Reschke <julian.reschke@gmx.de>, HTTP Working Group <ietf-http-wg@w3.org>
Message-Id: <02FE99F0-E4FB-4BBE-BC46-D65FC3B69E75@mnot.net>
To: Willy Tarreau <w@1wt.eu>

On 30/10/2011, at 1:29 AM, Willy Tarreau wrote:

> Couldn't we suggest that new schemes must use semi-colon instead ?
> After all, existing parsers will have to be extended to support new
> schemes anyway, so making them support a more reliable syntax makes
> sense.

Not necessarily; an implementation can (and should be able to) use a generic parser no matter what new schemes are introduced.

Also, if a non-upgraded parser gets a message with multiple challenges in it, it could get confused by this.

To be clear -- I'm no fan of the current syntax, but we need to be *extremely* careful to make sure we don't make the situation worse.


Mark Nottingham   http://www.mnot.net/
Received on Monday, 31 October 2011 03:05:55 UTC

This archive was generated by hypermail 2.4.0 : Thursday, 2 February 2023 18:43:26 UTC