|
| From: | Jason Rumney |
| Subject: | Re: address@hidden: url-http-handle-authentication does not handle multiple WWW-Authenticate: lines.] |
| Date: | Thu, 02 Nov 2006 22:24:51 +0000 |
| User-agent: | Thunderbird 1.5.0.7 (Windows/20060909) |
Richard Stallman wrote:
We can install this without papers, but is it correct?
It's better than the current situation of giving up if the auth method in the first header is not supported, but still not correct according to RFC-2617, which says that we MUST always select the most secure authentication method supported when offered multiple WWW-Authenticate headers.
| [Prev in Thread] | Current Thread | [Next in Thread] |