Feedback on REST-GSS

• From: Nico Williams <nico@cryptonector.com>
• Date: Tue, 10 Jul 2012 23:39:07 -0500
• To: HTTP Working Group <ietf-http-wg@w3.org>
• Message-ID: <CAK3OfOjuPAEA8RyJuJZOcdKh_nxKFiyL50brVrtX43WV2bxWHg@mail.gmail.com>

I've gotten some valuable feedback on REST-GSS off-list.  I'll be
submitting a new I-D as a result.  The main changes will be:

 - use the 401 Unauthorized code and WWW-Authenticate response
   header to convey the list of authentication mechanisms supported,
   the list of channel binding types supported, and such things;

 - drop the use of well-known URIs.

Nico
--

Received on Wednesday, 11 July 2012 04:39:48 UTC