Re: WG Review: Recharter of Hypertext Transfer Protocol Bis (httpbis)

On Tue, 21 Feb 2012, Michael Richardson wrote:

> 
> >>>>> "Barry" == Barry Leiba <barryleiba@computer.org> writes:
>     Barry> OAuth is an authorization framework, not an authentication
>     Barry> one.  Please be careful to make the distinction.
> 
>     Barry> What we're looking at here is the need for an HTTP
>     Barry> authentication system that (for example) doesn't send
>     Barry> reusable credentials, is less susceptible to spoofing
>     Barry> attacks, and so on.
> 
> and is implemented in HTTP, not in terms of HTML forms, yet has all the 
> flexibility of the HTML form method?

And includes the ability for the user to logoff / the server reset the 
login?

Received on Wednesday, 22 February 2012 07:05:15 UTC