Re: [secdir] Reuse of credentials per realm, was: SECDIR review of draft-ietf-httpbis-p7-auth-24

[Stephen Kent <[e-mail]>]

Julian,

Thanks. I suggest including that as an example, for other readers.
It's consistent with your later discussion of purging credentials, so
you could include a forward pointer to that text.

Steve
-----
On 10/30/13 1:59 PM, Julian Reschke wrote:
> On 2013-10-30 17:51, Stephen Kent wrote:
>> Julian,
>>
>> Since, as you note, the server ultimately accepts or rejects the
>> credentials,
>> it was not clear under what circumstances "user preferences" are a valid
>> factor
>> in deciding when to stop using the same set of credentials. If you could
>> elaborate
>> that would be useful.
>
> Well, that text was written 14 years ago, so I really don't know 
> exactly what the authors had in mind.
>
> That being said, here's an example: a user pref defining how long 
> credentials can be sent after a certain time of inactivity.
>
> Best regards, Julian
>
>