Re: p:http-request: required cookie support?

2009/4/16 Norman Walsh wrote:

> It is worded as a "SHOULD". Implementations that can't, or have a good
> reason not to implement it, can decline to do so on this basis.

> On the other hand, given that it is apparently common practice to use
> this "trick" in some web service authentication scenarios, the WG
> feels that it is promoting both utility and interoperabilty by
> encouraging implementors to support it.

> Please let us know if you do not find this rationale satisfactory.

  No, I think that's perfect.  Gives the spirit of the spec and
encourages implementors to what is the common usage, while lets them
deciding they know more than you about their own implementation's
context.

  That's fine for me.  Regards,

-- 
Florent Georges
http://www.fgeorges.org/

Received on Thursday, 16 April 2009 22:14:17 UTC