Re: RFC2616 vs RFC2617, was: Straw-man charter for http-bis

tor 2007-06-07 klockan 18:18 +0200 skrev Julian Reschke:

> BTW: does the framework really require fixing?

Not really imho. It's an extensible negotiable framework for message
based authentication with no dependencies on how such authentication is
implemented besides it being message based to fit in the message
structure of HTTP.

But it might need to be complemented with a framework for message
integrity however. Digest touches this, but not sure having message
integrity at the authentication level is right..