W3C home > Mailing lists > Public > ietf-http-wg@w3.org > January to March 2020

Re: Adding user@ to HTTP[S] URIs

From: Rick van Rein <rick@openfortress.nl>
Date: Sat, 25 Jan 2020 16:59:19 +0100
Message-ID: <5E2C65D7.7030408@openfortress.nl>
To: Daniel Stenberg <daniel@haxx.se>
CC: ietf-http-wg@w3.org
Hi Daniel,

> You can't fix this simply by saying that setting the name part of the
> userinfo in a HTTP URI is OK. HTTP has no established way to send a
> user name outside of authentication.

Exactly.  That's why I started this thread with an Internet Draft,
https://datatracker.ietf.org/doc/draft-vanrein-http-unauth-user/

For http://john@example.com/index.html it sends

GET /index.html HTTP/1.1
Host: example.com
User: john


Cheers,
 -Rick
Received on Saturday, 25 January 2020 15:59:39 UTC

This archive was generated by hypermail 2.4.0 : Saturday, 25 January 2020 15:59:40 UTC