Return-Path: X-Original-To: oauth@core3.amsl.com Delivered-To: oauth@core3.amsl.com Received: from localhost (localhost [127.0.0.1]) by core3.amsl.com (Postfix) with ESMTP id E6CBC3A6924 for ; Mon, 28 Jun 2010 11:07:39 -0700 (PDT) X-Virus-Scanned: amavisd-new at amsl.com X-Spam-Flag: NO X-Spam-Score: -1.367 X-Spam-Level: X-Spam-Status: No, score=-1.367 tagged_above=-999 required=5 tests=[AWL=0.881, BAYES_00=-2.599, HELO_EQ_DE=0.35, HTML_MESSAGE=0.001] Received: from mail.ietf.org ([64.170.98.32]) by localhost (core3.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id gZH0h-WPGOcC for ; Mon, 28 Jun 2010 11:07:39 -0700 (PDT) Received: from smtprelay02.ispgateway.de (smtprelay02.ispgateway.de [80.67.18.14]) by core3.amsl.com (Postfix) with ESMTP id C92863A68E8 for ; Mon, 28 Jun 2010 11:07:38 -0700 (PDT) Received: from p4fff2973.dip.t-dialin.net ([79.255.41.115] helo=[127.0.0.1]) by smtprelay02.ispgateway.de with esmtpa (Exim 4.68) (envelope-from ) id 1OTIkF-0000eF-A0; Mon, 28 Jun 2010 20:07:47 +0200 Message-ID: <4C28E4F2.6060605@lodderstedt.net> Date: Mon, 28 Jun 2010 20:07:46 +0200 From: Torsten Lodderstedt User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.10) Gecko/20100512 Thunderbird/3.0.5 MIME-Version: 1.0 To: Dick Hardt References: <90C41DD21FB7C64BB94121FBBC2E72343B3EC84ADE@P3PW5EX1MB01.EX1.SECURESERVER.NET> <269A7D01-CB98-46F3-9D17-C0AAA31041E4@gmail.com> In-Reply-To: <269A7D01-CB98-46F3-9D17-C0AAA31041E4@gmail.com> Content-Type: multipart/alternative; boundary="------------080709060204070201090706" X-Df-Sender: 141509 Cc: "OAuth WG \(oauth@ietf.org\)" Subject: Re: [OAUTH-WG] What to do about 'realm' X-BeenThere: oauth@ietf.org X-Mailman-Version: 2.1.9 Precedence: list List-Id: OAUTH WG List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Jun 2010 18:07:40 -0000 This is a multi-part message in MIME format. --------------080709060204070201090706 Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 8bit +1 Am 28.06.2010 07:37, schrieb Dick Hardt: > I vote for (3) unless a good (4) is suggested. > > On 2010-06-27, at 6:51 PM, Eran Hammer-Lahav wrote: > >> Over the past year many people expressed concerns about the use of >> the ‘realm’ WWW-Authenticate header parameter. The parameter is >> defined in RFC 2617 as required, and is allowed to have >> scheme-specific structure. >> We have a few options: >> 1. Leave it as required under the definition of RFC 2617 (i.e. >> provide no help, developers will need to ready 2617 and figure out >> what to do with it). >> 2. Update 2617 to remove the requirement – this is not going to be >> easy or possible to predict success. >> 3. Provide specific guidance as to what to do with the realm parameter. >> 4. Something else. >> Comments? >> EHL >> _______________________________________________ >> OAuth mailing list >> OAuth@ietf.org >> https://www.ietf.org/mailman/listinfo/oauth > > > _______________________________________________ > OAuth mailing list > OAuth@ietf.org > https://www.ietf.org/mailman/listinfo/oauth > --------------080709060204070201090706 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: 8bit +1

Am 28.06.2010 07:37, schrieb Dick Hardt:
I vote for (3) unless a good (4) is suggested.

On 2010-06-27, at 6:51 PM, Eran Hammer-Lahav wrote:

Over the past year many people expressed concerns about the use of the ‘realm’ WWW-Authenticate header parameter. The parameter is defined in RFC 2617 as required, and is allowed to have scheme-specific structure.
 
We have a few options:
 
1. Leave it as required under the definition of RFC 2617 (i.e. provide no help, developers will need to ready 2617 and figure out what to do with it).
2. Update 2617 to remove the requirement – this is not going to be easy or possible to predict success.
3. Provide specific guidance as to what to do with the realm parameter.
4. Something else.
 
Comments?
 
EHL
_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth


_______________________________________________
OAuth mailing list
OAuth@ietf.org
https://www.ietf.org/mailman/listinfo/oauth
--------------080709060204070201090706--