proxies and forwarding of credentials, was: SECDIR review of draft-ietf-httpbis-p7-auth-24

On 2013-10-29 20:35, Stephen Kent wrote:
> ...
> In Section 4.3, the text says:
>
> A proxy MAY relay
>
> the credentials from the client request to the next proxy if that is
>
> the mechanism by which the proxies cooperatively authenticate a given
>
> request.
>
> If, as stated here, a set of proxies cooperatively authenticate a
> request, then isn’t this a MUST vs. a MAY?
> ...

Maybe. I have no experience with proxy authentication, and this piece of 
text was copied from 
<http://greenbytes.de/tech/webdav/rfc2616.html#rfc.section.14.34>.

Perhaps this is a case where we should drop the RFC2119 keywords and 
just make a statement such as:

"A proxy can relay the credentials from the client request to the next 
proxy if that is the mechanism by which the proxies cooperatively 
authenticate a given request."

?

Best regards, Julian

Received on Thursday, 31 October 2013 13:44:08 UTC