- From: Martin Thomson <martin.thomson@gmail.com>
- Date: Fri, 23 Mar 2012 16:27:40 -0700
- To: Mark Nottingham <mnot@mnot.net>
- Cc: Alexey Melnikov <alexey.melnikov@isode.com>, HTTP Working Group <ietf-http-wg@w3.org>
>> And maybe the use of MUST is not appropriate here. > > That's what I was thinking too. Saying nothing works. "The user agent MUST select one auth-scheme that it understands..." Or you remove the MUST altogether, there's nothing saying that a user agent couldn't just go off and make a cup of tea when it encounters an WWW-Authenticate. "The user agent selects one challenge that it can use..."
Received on Friday, 23 March 2012 23:28:09 UTC