| [231] | 1 | <!DOCTYPE html |
|---|
| 2 | PUBLIC "-//W3C//DTD HTML 4.01//EN"> |
|---|
| 3 | <html lang="en"> |
|---|
| [1099] | 4 | <head profile="http://www.w3.org/2006/03/hcard http://dublincore.org/documents/2008/08/04/dc-html/"> |
|---|
| [231] | 5 | <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> |
|---|
| 6 | <title>HTTP/1.1, part 7: Authentication</title><style type="text/css" title="Xml2Rfc (sans serif)"> |
|---|
| 7 | a { |
|---|
| 8 | text-decoration: none; |
|---|
| 9 | } |
|---|
| 10 | a.smpl { |
|---|
| 11 | color: black; |
|---|
| 12 | } |
|---|
| 13 | a:hover { |
|---|
| 14 | text-decoration: underline; |
|---|
| 15 | } |
|---|
| 16 | a:active { |
|---|
| 17 | text-decoration: underline; |
|---|
| 18 | } |
|---|
| 19 | address { |
|---|
| 20 | margin-top: 1em; |
|---|
| 21 | margin-left: 2em; |
|---|
| 22 | font-style: normal; |
|---|
| 23 | } |
|---|
| 24 | body { |
|---|
| 25 | color: black; |
|---|
| 26 | font-family: verdana, helvetica, arial, sans-serif; |
|---|
| 27 | font-size: 10pt; |
|---|
| 28 | } |
|---|
| 29 | cite { |
|---|
| 30 | font-style: normal; |
|---|
| 31 | } |
|---|
| 32 | dd { |
|---|
| 33 | margin-right: 2em; |
|---|
| 34 | } |
|---|
| 35 | dl { |
|---|
| 36 | margin-left: 2em; |
|---|
| 37 | } |
|---|
| 38 | |
|---|
| [1099] | 39 | ul.empty { |
|---|
| 40 | list-style-type: none; |
|---|
| 41 | } |
|---|
| 42 | ul.empty li { |
|---|
| [231] | 43 | margin-top: .5em; |
|---|
| 44 | } |
|---|
| 45 | dl p { |
|---|
| 46 | margin-left: 0em; |
|---|
| 47 | } |
|---|
| 48 | dt { |
|---|
| 49 | margin-top: .5em; |
|---|
| 50 | } |
|---|
| 51 | h1 { |
|---|
| 52 | font-size: 14pt; |
|---|
| 53 | line-height: 21pt; |
|---|
| 54 | page-break-after: avoid; |
|---|
| 55 | } |
|---|
| 56 | h1.np { |
|---|
| 57 | page-break-before: always; |
|---|
| 58 | } |
|---|
| 59 | h1 a { |
|---|
| 60 | color: #333333; |
|---|
| 61 | } |
|---|
| 62 | h2 { |
|---|
| 63 | font-size: 12pt; |
|---|
| 64 | line-height: 15pt; |
|---|
| 65 | page-break-after: avoid; |
|---|
| 66 | } |
|---|
| [1099] | 67 | h3, h4, h5, h6 { |
|---|
| [231] | 68 | font-size: 10pt; |
|---|
| 69 | page-break-after: avoid; |
|---|
| 70 | } |
|---|
| [1099] | 71 | h2 a, h3 a, h4 a, h5 a, h6 a { |
|---|
| [231] | 72 | color: black; |
|---|
| 73 | } |
|---|
| 74 | img { |
|---|
| 75 | margin-left: 3em; |
|---|
| 76 | } |
|---|
| 77 | li { |
|---|
| 78 | margin-left: 2em; |
|---|
| 79 | margin-right: 2em; |
|---|
| 80 | } |
|---|
| 81 | ol { |
|---|
| 82 | margin-left: 2em; |
|---|
| 83 | margin-right: 2em; |
|---|
| 84 | } |
|---|
| 85 | ol p { |
|---|
| 86 | margin-left: 0em; |
|---|
| 87 | } |
|---|
| 88 | p { |
|---|
| 89 | margin-left: 2em; |
|---|
| 90 | margin-right: 2em; |
|---|
| 91 | } |
|---|
| 92 | pre { |
|---|
| 93 | margin-left: 3em; |
|---|
| 94 | background-color: lightyellow; |
|---|
| 95 | padding: .25em; |
|---|
| 96 | } |
|---|
| 97 | pre.text2 { |
|---|
| 98 | border-style: dotted; |
|---|
| 99 | border-width: 1px; |
|---|
| 100 | background-color: #f0f0f0; |
|---|
| 101 | width: 69em; |
|---|
| 102 | } |
|---|
| 103 | pre.inline { |
|---|
| 104 | background-color: white; |
|---|
| 105 | padding: 0em; |
|---|
| 106 | } |
|---|
| 107 | pre.text { |
|---|
| 108 | border-style: dotted; |
|---|
| 109 | border-width: 1px; |
|---|
| 110 | background-color: #f8f8f8; |
|---|
| 111 | width: 69em; |
|---|
| 112 | } |
|---|
| 113 | pre.drawing { |
|---|
| 114 | border-style: solid; |
|---|
| 115 | border-width: 1px; |
|---|
| 116 | background-color: #f8f8f8; |
|---|
| 117 | padding: 2em; |
|---|
| 118 | } |
|---|
| 119 | table { |
|---|
| 120 | margin-left: 2em; |
|---|
| 121 | } |
|---|
| 122 | table.header { |
|---|
| [1099] | 123 | border-spacing: 1px; |
|---|
| [231] | 124 | width: 95%; |
|---|
| 125 | font-size: 10pt; |
|---|
| 126 | color: white; |
|---|
| 127 | } |
|---|
| 128 | td.top { |
|---|
| 129 | vertical-align: top; |
|---|
| 130 | } |
|---|
| 131 | td.topnowrap { |
|---|
| 132 | vertical-align: top; |
|---|
| 133 | white-space: nowrap; |
|---|
| 134 | } |
|---|
| [1099] | 135 | table.header td { |
|---|
| [231] | 136 | background-color: gray; |
|---|
| 137 | width: 50%; |
|---|
| 138 | } |
|---|
| [1099] | 139 | table.header a { |
|---|
| [231] | 140 | color: white; |
|---|
| 141 | } |
|---|
| 142 | td.reference { |
|---|
| 143 | vertical-align: top; |
|---|
| 144 | white-space: nowrap; |
|---|
| 145 | padding-right: 1em; |
|---|
| 146 | } |
|---|
| 147 | thead { |
|---|
| 148 | display:table-header-group; |
|---|
| 149 | } |
|---|
| [1099] | 150 | ul.toc, ul.toc ul { |
|---|
| [231] | 151 | list-style: none; |
|---|
| 152 | margin-left: 1.5em; |
|---|
| 153 | margin-right: 0em; |
|---|
| 154 | padding-left: 0em; |
|---|
| 155 | } |
|---|
| [1099] | 156 | ul.toc li { |
|---|
| [231] | 157 | line-height: 150%; |
|---|
| 158 | font-weight: bold; |
|---|
| 159 | font-size: 10pt; |
|---|
| 160 | margin-left: 0em; |
|---|
| 161 | margin-right: 0em; |
|---|
| 162 | } |
|---|
| [1099] | 163 | ul.toc li li { |
|---|
| [231] | 164 | line-height: normal; |
|---|
| 165 | font-weight: normal; |
|---|
| 166 | font-size: 9pt; |
|---|
| 167 | margin-left: 0em; |
|---|
| 168 | margin-right: 0em; |
|---|
| 169 | } |
|---|
| [1099] | 170 | li.excluded { |
|---|
| [231] | 171 | font-size: 0pt; |
|---|
| 172 | } |
|---|
| 173 | ul p { |
|---|
| 174 | margin-left: 0em; |
|---|
| 175 | } |
|---|
| [1099] | 176 | ul.ind, ul.ind ul { |
|---|
| [231] | 177 | list-style: none; |
|---|
| 178 | margin-left: 1.5em; |
|---|
| 179 | margin-right: 0em; |
|---|
| 180 | padding-left: 0em; |
|---|
| [1099] | 181 | page-break-before: avoid; |
|---|
| [231] | 182 | } |
|---|
| [1099] | 183 | ul.ind li { |
|---|
| [231] | 184 | font-weight: bold; |
|---|
| 185 | line-height: 200%; |
|---|
| 186 | margin-left: 0em; |
|---|
| 187 | margin-right: 0em; |
|---|
| 188 | } |
|---|
| [1099] | 189 | ul.ind li li { |
|---|
| [231] | 190 | font-weight: normal; |
|---|
| 191 | line-height: 150%; |
|---|
| 192 | margin-left: 0em; |
|---|
| 193 | margin-right: 0em; |
|---|
| 194 | } |
|---|
| [1099] | 195 | .avoidbreak { |
|---|
| 196 | page-break-inside: avoid; |
|---|
| 197 | } |
|---|
| [231] | 198 | .bcp14 { |
|---|
| 199 | font-style: normal; |
|---|
| 200 | text-transform: lowercase; |
|---|
| 201 | font-variant: small-caps; |
|---|
| 202 | } |
|---|
| 203 | .comment { |
|---|
| 204 | background-color: yellow; |
|---|
| 205 | } |
|---|
| 206 | .center { |
|---|
| 207 | text-align: center; |
|---|
| 208 | } |
|---|
| 209 | .error { |
|---|
| 210 | color: red; |
|---|
| 211 | font-style: italic; |
|---|
| 212 | font-weight: bold; |
|---|
| 213 | } |
|---|
| 214 | .figure { |
|---|
| 215 | font-weight: bold; |
|---|
| 216 | text-align: center; |
|---|
| 217 | font-size: 9pt; |
|---|
| 218 | } |
|---|
| 219 | .filename { |
|---|
| 220 | color: #333333; |
|---|
| 221 | font-weight: bold; |
|---|
| 222 | font-size: 12pt; |
|---|
| 223 | line-height: 21pt; |
|---|
| 224 | text-align: center; |
|---|
| 225 | } |
|---|
| 226 | .fn { |
|---|
| 227 | font-weight: bold; |
|---|
| 228 | } |
|---|
| 229 | .hidden { |
|---|
| 230 | display: none; |
|---|
| 231 | } |
|---|
| 232 | .left { |
|---|
| 233 | text-align: left; |
|---|
| 234 | } |
|---|
| 235 | .right { |
|---|
| 236 | text-align: right; |
|---|
| 237 | } |
|---|
| 238 | .title { |
|---|
| 239 | color: #990000; |
|---|
| 240 | font-size: 18pt; |
|---|
| 241 | line-height: 18pt; |
|---|
| 242 | font-weight: bold; |
|---|
| 243 | text-align: center; |
|---|
| 244 | margin-top: 36pt; |
|---|
| 245 | } |
|---|
| 246 | .vcardline { |
|---|
| 247 | display: block; |
|---|
| 248 | } |
|---|
| 249 | .warning { |
|---|
| 250 | font-size: 14pt; |
|---|
| 251 | background-color: yellow; |
|---|
| 252 | } |
|---|
| 253 | |
|---|
| 254 | |
|---|
| 255 | @media print { |
|---|
| 256 | .noprint { |
|---|
| 257 | display: none; |
|---|
| 258 | } |
|---|
| 259 | |
|---|
| 260 | a { |
|---|
| 261 | color: black; |
|---|
| 262 | text-decoration: none; |
|---|
| 263 | } |
|---|
| 264 | |
|---|
| 265 | table.header { |
|---|
| 266 | width: 90%; |
|---|
| 267 | } |
|---|
| 268 | |
|---|
| 269 | td.header { |
|---|
| 270 | width: 50%; |
|---|
| 271 | color: black; |
|---|
| 272 | background-color: white; |
|---|
| 273 | vertical-align: top; |
|---|
| 274 | font-size: 12pt; |
|---|
| 275 | } |
|---|
| 276 | |
|---|
| 277 | ul.toc a::after { |
|---|
| 278 | content: leader('.') target-counter(attr(href), page); |
|---|
| 279 | } |
|---|
| 280 | |
|---|
| [1099] | 281 | ul.ind li li a { |
|---|
| [231] | 282 | content: target-counter(attr(href), page); |
|---|
| 283 | } |
|---|
| 284 | |
|---|
| 285 | .print2col { |
|---|
| 286 | column-count: 2; |
|---|
| 287 | -moz-column-count: 2; |
|---|
| 288 | column-fill: auto; |
|---|
| 289 | } |
|---|
| 290 | } |
|---|
| 291 | |
|---|
| 292 | @page { |
|---|
| 293 | @top-left { |
|---|
| [1099] | 294 | content: "Internet-Draft"; |
|---|
| [231] | 295 | } |
|---|
| 296 | @top-right { |
|---|
| 297 | content: "February 2008"; |
|---|
| 298 | } |
|---|
| 299 | @top-center { |
|---|
| 300 | content: "HTTP/1.1, Part 7"; |
|---|
| 301 | } |
|---|
| 302 | @bottom-left { |
|---|
| 303 | content: "Fielding, et al."; |
|---|
| 304 | } |
|---|
| 305 | @bottom-center { |
|---|
| 306 | content: "Standards Track"; |
|---|
| 307 | } |
|---|
| 308 | @bottom-right { |
|---|
| 309 | content: "[Page " counter(page) "]"; |
|---|
| 310 | } |
|---|
| 311 | } |
|---|
| 312 | |
|---|
| 313 | @page:first { |
|---|
| 314 | @top-left { |
|---|
| 315 | content: normal; |
|---|
| 316 | } |
|---|
| 317 | @top-right { |
|---|
| 318 | content: normal; |
|---|
| 319 | } |
|---|
| 320 | @top-center { |
|---|
| 321 | content: normal; |
|---|
| 322 | } |
|---|
| 323 | } |
|---|
| 324 | </style><link rel="Contents" href="#rfc.toc"> |
|---|
| 325 | <link rel="Author" href="#rfc.authors"> |
|---|
| 326 | <link rel="Copyright" href="#rfc.copyright"> |
|---|
| 327 | <link rel="Index" href="#rfc.index"> |
|---|
| 328 | <link rel="Chapter" title="1 Introduction" href="#rfc.section.1"> |
|---|
| 329 | <link rel="Chapter" title="2 Notational Conventions and Generic Grammar" href="#rfc.section.2"> |
|---|
| 330 | <link rel="Chapter" title="3 Status Code Definitions" href="#rfc.section.3"> |
|---|
| 331 | <link rel="Chapter" title="4 Header Field Definitions" href="#rfc.section.4"> |
|---|
| 332 | <link rel="Chapter" title="5 IANA Considerations" href="#rfc.section.5"> |
|---|
| 333 | <link rel="Chapter" title="6 Security Considerations" href="#rfc.section.6"> |
|---|
| 334 | <link rel="Chapter" title="7 Acknowledgments" href="#rfc.section.7"> |
|---|
| 335 | <link rel="Chapter" href="#rfc.section.8" title="8 References"> |
|---|
| 336 | <link rel="Appendix" title="A Compatibility with Previous Versions" href="#rfc.section.A"> |
|---|
| 337 | <link rel="Appendix" title="B Change Log (to be removed by RFC Editor before publication)" href="#rfc.section.B"> |
|---|
| [1099] | 338 | <meta name="generator" content="http://greenbytes.de/tech/webdav/rfc2629.xslt, Revision 1.537, 2010-12-30 14:21:59, XSLT vendor: SAXON 8.9 from Saxonica http://www.saxonica.com/"> |
|---|
| 339 | <link rel="schema.dct" href="http://purl.org/dc/terms/"> |
|---|
| 340 | <meta name="dct.creator" content="Fielding, R."> |
|---|
| 341 | <meta name="dct.creator" content="Gettys, J."> |
|---|
| 342 | <meta name="dct.creator" content="Mogul, J."> |
|---|
| 343 | <meta name="dct.creator" content="Frystyk, H."> |
|---|
| 344 | <meta name="dct.creator" content="Masinter, L."> |
|---|
| 345 | <meta name="dct.creator" content="Leach, P."> |
|---|
| 346 | <meta name="dct.creator" content="Berners-Lee, T."> |
|---|
| 347 | <meta name="dct.creator" content="Lafon, Y."> |
|---|
| 348 | <meta name="dct.creator" content="Reschke, J. F."> |
|---|
| 349 | <meta name="dct.identifier" content="urn:ietf:id:draft-ietf-httpbis-p7-auth-02"> |
|---|
| 350 | <meta name="dct.issued" scheme="ISO8601" content="2008-02-24"> |
|---|
| 351 | <meta name="dct.replaces" content="urn:ietf:rfc:2616"> |
|---|
| 352 | <meta name="dct.abstract" content="The Hypertext Transfer Protocol (HTTP) is an application-level protocol for distributed, collaborative, hypermedia information systems. HTTP has been in use by the World Wide Web global information initiative since 1990. This document is Part 7 of the seven-part specification that defines the protocol referred to as "HTTP/1.1" and, taken together, obsoletes RFC 2616. Part 7 defines HTTP Authentication."> |
|---|
| 353 | <meta name="description" content="The Hypertext Transfer Protocol (HTTP) is an application-level protocol for distributed, collaborative, hypermedia information systems. HTTP has been in use by the World Wide Web global information initiative since 1990. This document is Part 7 of the seven-part specification that defines the protocol referred to as "HTTP/1.1" and, taken together, obsoletes RFC 2616. Part 7 defines HTTP Authentication."> |
|---|
| [231] | 354 | </head> |
|---|
| 355 | <body> |
|---|
| [1099] | 356 | <table class="header"> |
|---|
| 357 | <tbody> |
|---|
| 358 | <tr> |
|---|
| 359 | <td class="left">Network Working Group</td> |
|---|
| 360 | <td class="right">R. Fielding, Editor</td> |
|---|
| 361 | </tr> |
|---|
| 362 | <tr> |
|---|
| 363 | <td class="left">Internet-Draft</td> |
|---|
| 364 | <td class="right">Day Software</td> |
|---|
| 365 | </tr> |
|---|
| 366 | <tr> |
|---|
| 367 | <td class="left">Obsoletes: <a href="http://tools.ietf.org/html/rfc2616">2616</a> (if approved) |
|---|
| 368 | </td> |
|---|
| 369 | <td class="right">J. Gettys</td> |
|---|
| 370 | </tr> |
|---|
| 371 | <tr> |
|---|
| 372 | <td class="left">Updates: <a href="http://tools.ietf.org/html/rfc2617">2617</a> (if approved) |
|---|
| 373 | </td> |
|---|
| 374 | <td class="right">One Laptop per Child</td> |
|---|
| 375 | </tr> |
|---|
| 376 | <tr> |
|---|
| 377 | <td class="left">Intended status: Standards Track</td> |
|---|
| 378 | <td class="right">J. Mogul</td> |
|---|
| 379 | </tr> |
|---|
| 380 | <tr> |
|---|
| 381 | <td class="left">Expires: August 27, 2008</td> |
|---|
| 382 | <td class="right">HP</td> |
|---|
| 383 | </tr> |
|---|
| 384 | <tr> |
|---|
| 385 | <td class="left"></td> |
|---|
| 386 | <td class="right">H. Frystyk</td> |
|---|
| 387 | </tr> |
|---|
| 388 | <tr> |
|---|
| 389 | <td class="left"></td> |
|---|
| 390 | <td class="right">Microsoft</td> |
|---|
| 391 | </tr> |
|---|
| 392 | <tr> |
|---|
| 393 | <td class="left"></td> |
|---|
| 394 | <td class="right">L. Masinter</td> |
|---|
| 395 | </tr> |
|---|
| 396 | <tr> |
|---|
| 397 | <td class="left"></td> |
|---|
| 398 | <td class="right">Adobe Systems</td> |
|---|
| 399 | </tr> |
|---|
| 400 | <tr> |
|---|
| 401 | <td class="left"></td> |
|---|
| 402 | <td class="right">P. Leach</td> |
|---|
| 403 | </tr> |
|---|
| 404 | <tr> |
|---|
| 405 | <td class="left"></td> |
|---|
| 406 | <td class="right">Microsoft</td> |
|---|
| 407 | </tr> |
|---|
| 408 | <tr> |
|---|
| 409 | <td class="left"></td> |
|---|
| 410 | <td class="right">T. Berners-Lee</td> |
|---|
| 411 | </tr> |
|---|
| 412 | <tr> |
|---|
| 413 | <td class="left"></td> |
|---|
| 414 | <td class="right">W3C/MIT</td> |
|---|
| 415 | </tr> |
|---|
| 416 | <tr> |
|---|
| 417 | <td class="left"></td> |
|---|
| 418 | <td class="right">Y. Lafon, Editor</td> |
|---|
| 419 | </tr> |
|---|
| 420 | <tr> |
|---|
| 421 | <td class="left"></td> |
|---|
| 422 | <td class="right">W3C</td> |
|---|
| 423 | </tr> |
|---|
| 424 | <tr> |
|---|
| 425 | <td class="left"></td> |
|---|
| 426 | <td class="right">J. Reschke, Editor</td> |
|---|
| 427 | </tr> |
|---|
| 428 | <tr> |
|---|
| 429 | <td class="left"></td> |
|---|
| 430 | <td class="right">greenbytes</td> |
|---|
| 431 | </tr> |
|---|
| 432 | <tr> |
|---|
| 433 | <td class="left"></td> |
|---|
| 434 | <td class="right">February 24, 2008</td> |
|---|
| 435 | </tr> |
|---|
| 436 | </tbody> |
|---|
| [231] | 437 | </table> |
|---|
| 438 | <p class="title">HTTP/1.1, part 7: Authentication<br><span class="filename">draft-ietf-httpbis-p7-auth-02</span></p> |
|---|
| 439 | <h1><a id="rfc.status" href="#rfc.status">Status of this Memo</a></h1> |
|---|
| 440 | <p>By submitting this Internet-Draft, each author represents that any applicable patent or other IPR claims of which he or she |
|---|
| 441 | is aware have been or will be disclosed, and any of which he or she becomes aware will be disclosed, in accordance with Section |
|---|
| 442 | 6 of BCP 79. |
|---|
| 443 | </p> |
|---|
| 444 | <p>Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note |
|---|
| 445 | that other groups may also distribute working documents as Internet-Drafts. |
|---|
| 446 | </p> |
|---|
| 447 | <p>Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other |
|---|
| 448 | documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as “work |
|---|
| 449 | in progress”. |
|---|
| 450 | </p> |
|---|
| [1099] | 451 | <p>The list of current Internet-Drafts can be accessed at <a href="http://www.ietf.org/ietf/1id-abstracts.txt">http://www.ietf.org/ietf/1id-abstracts.txt</a>. |
|---|
| [231] | 452 | </p> |
|---|
| [1099] | 453 | <p>The list of Internet-Draft Shadow Directories can be accessed at <a href="http://www.ietf.org/shadow.html">http://www.ietf.org/shadow.html</a>. |
|---|
| [231] | 454 | </p> |
|---|
| [1099] | 455 | <p>This Internet-Draft will expire on August 27, 2008.</p> |
|---|
| [231] | 456 | <h1 id="rfc.abstract"><a href="#rfc.abstract">Abstract</a></h1> |
|---|
| 457 | <p>The Hypertext Transfer Protocol (HTTP) is an application-level protocol for distributed, collaborative, hypermedia information |
|---|
| 458 | systems. HTTP has been in use by the World Wide Web global information initiative since 1990. This document is Part 7 of the |
|---|
| 459 | seven-part specification that defines the protocol referred to as "HTTP/1.1" and, taken together, obsoletes RFC 2616. Part |
|---|
| 460 | 7 defines HTTP Authentication. |
|---|
| 461 | </p> |
|---|
| 462 | <h1 id="rfc.note.1"><a href="#rfc.note.1">Editorial Note (To be removed by RFC Editor)</a></h1> |
|---|
| 463 | <p>Discussion of this draft should take place on the HTTPBIS working group mailing list (ietf-http-wg@w3.org). The current issues |
|---|
| 464 | list is at <<a href="http://www.tools.ietf.org/wg/httpbis/trac/report/11">http://www.tools.ietf.org/wg/httpbis/trac/report/11</a>> and related documents (including fancy diffs) can be found at <<a href="http://www.tools.ietf.org/wg/httpbis/">http://www.tools.ietf.org/wg/httpbis/</a>>. |
|---|
| 465 | </p> |
|---|
| 466 | <p>This draft incorporates those issue resolutions that were either collected in the original RFC2616 errata list (<<a href="http://purl.org/NET/http-errata">http://purl.org/NET/http-errata</a>>), or which were agreed upon on the mailing list between October 2006 and November 2007 (as published in "draft-lafon-rfc2616bis-03"). |
|---|
| 467 | </p> |
|---|
| 468 | <hr class="noprint"> |
|---|
| 469 | <h1 class="np" id="rfc.toc"><a href="#rfc.toc">Table of Contents</a></h1> |
|---|
| 470 | <ul class="toc"> |
|---|
| [1099] | 471 | <li>1. <a href="#introduction">Introduction</a><ul> |
|---|
| 472 | <li>1.1 <a href="#intro.requirements">Requirements</a></li> |
|---|
| [231] | 473 | </ul> |
|---|
| 474 | </li> |
|---|
| [1099] | 475 | <li>2. <a href="#notation">Notational Conventions and Generic Grammar</a></li> |
|---|
| 476 | <li>3. <a href="#rfc.section.3">Status Code Definitions</a><ul> |
|---|
| 477 | <li>3.1 <a href="#status.401">401 Unauthorized</a></li> |
|---|
| 478 | <li>3.2 <a href="#status.407">407 Proxy Authentication Required</a></li> |
|---|
| [231] | 479 | </ul> |
|---|
| 480 | </li> |
|---|
| [1099] | 481 | <li>4. <a href="#header.fields">Header Field Definitions</a><ul> |
|---|
| 482 | <li>4.1 <a href="#header.authorization">Authorization</a></li> |
|---|
| 483 | <li>4.2 <a href="#header.proxy-authenticate">Proxy-Authenticate</a></li> |
|---|
| 484 | <li>4.3 <a href="#header.proxy-authorization">Proxy-Authorization</a></li> |
|---|
| 485 | <li>4.4 <a href="#header.www-authenticate">WWW-Authenticate</a></li> |
|---|
| [231] | 486 | </ul> |
|---|
| 487 | </li> |
|---|
| [1099] | 488 | <li>5. <a href="#IANA.considerations">IANA Considerations</a></li> |
|---|
| 489 | <li>6. <a href="#security.considerations">Security Considerations</a><ul> |
|---|
| 490 | <li>6.1 <a href="#auth.credentials.and.idle.clients">Authentication Credentials and Idle Clients</a></li> |
|---|
| [231] | 491 | </ul> |
|---|
| 492 | </li> |
|---|
| [1099] | 493 | <li>7. <a href="#ack">Acknowledgments</a></li> |
|---|
| 494 | <li>8. <a href="#rfc.references">References</a><ul> |
|---|
| 495 | <li>8.1 <a href="#rfc.references.1">Normative References</a></li> |
|---|
| 496 | <li>8.2 <a href="#rfc.references.2">Informative References</a></li> |
|---|
| [231] | 497 | </ul> |
|---|
| 498 | </li> |
|---|
| [1099] | 499 | <li><a href="#rfc.authors">Authors' Addresses</a></li> |
|---|
| 500 | <li>A. <a href="#compatibility">Compatibility with Previous Versions</a><ul> |
|---|
| 501 | <li>A.1 <a href="#changes.from.rfc.2616">Changes from RFC 2616</a></li> |
|---|
| [231] | 502 | </ul> |
|---|
| 503 | </li> |
|---|
| [1099] | 504 | <li>B. <a href="#rfc.section.B">Change Log (to be removed by RFC Editor before publication)</a><ul> |
|---|
| 505 | <li>B.1 <a href="#rfc.section.B.1">Since RFC2616</a></li> |
|---|
| 506 | <li>B.2 <a href="#rfc.section.B.2">Since draft-ietf-httpbis-p7-auth-00</a></li> |
|---|
| 507 | <li>B.3 <a href="#rfc.section.B.3">Since draft-ietf-httpbis-p7-auth-01</a></li> |
|---|
| [231] | 508 | </ul> |
|---|
| 509 | </li> |
|---|
| [1099] | 510 | <li><a href="#rfc.index">Index</a></li> |
|---|
| 511 | <li><a href="#rfc.ipr">Intellectual Property and Copyright Statements</a></li> |
|---|
| [231] | 512 | </ul> |
|---|
| 513 | <h1 id="rfc.section.1" class="np"><a href="#rfc.section.1">1.</a> <a id="introduction" href="#introduction">Introduction</a></h1> |
|---|
| 514 | <p id="rfc.section.1.p.1">This document defines HTTP/1.1 access control and authentication. Right now it includes the extracted relevant sections of <cite title="Hypertext Transfer Protocol -- HTTP/1.1" id="rfc.xref.RFC2616.1">RFC 2616</cite> with only minor changes. The intention is to move the general framework for HTTP authentication here, as currently specified |
|---|
| 515 | in <a href="#RFC2617" id="rfc.xref.RFC2617.1"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>, and allow the individual authentication mechanisms to be defined elsewhere. This introduction will be rewritten when that |
|---|
| 516 | occurs. |
|---|
| 517 | </p> |
|---|
| 518 | <p id="rfc.section.1.p.2">HTTP provides several <em class="bcp14">OPTIONAL</em> challenge-response authentication mechanisms which can be used by a server to challenge a client request and by a client to |
|---|
| 519 | provide authentication information. The general framework for access authentication, and the specification of "basic" and |
|---|
| 520 | "digest" authentication, are specified in "HTTP Authentication: Basic and Digest Access Authentication" <a href="#RFC2617" id="rfc.xref.RFC2617.2"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>. This specification adopts the definitions of "challenge" and "credentials" from that specification. |
|---|
| 521 | </p> |
|---|
| 522 | <h2 id="rfc.section.1.1"><a href="#rfc.section.1.1">1.1</a> <a id="intro.requirements" href="#intro.requirements">Requirements</a></h2> |
|---|
| 523 | <p id="rfc.section.1.1.p.1">The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" |
|---|
| 524 | in this document are to be interpreted as described in <a href="#RFC2119" id="rfc.xref.RFC2119.1"><cite title="Key words for use in RFCs to Indicate Requirement Levels">[RFC2119]</cite></a>. |
|---|
| 525 | </p> |
|---|
| 526 | <p id="rfc.section.1.1.p.2">An implementation is not compliant if it fails to satisfy one or more of the <em class="bcp14">MUST</em> or <em class="bcp14">REQUIRED</em> level requirements for the protocols it implements. An implementation that satisfies all the <em class="bcp14">MUST</em> or <em class="bcp14">REQUIRED</em> level and all the <em class="bcp14">SHOULD</em> level requirements for its protocols is said to be "unconditionally compliant"; one that satisfies all the <em class="bcp14">MUST</em> level requirements but not all the <em class="bcp14">SHOULD</em> level requirements for its protocols is said to be "conditionally compliant." |
|---|
| 527 | </p> |
|---|
| 528 | <h1 id="rfc.section.2"><a href="#rfc.section.2">2.</a> <a id="notation" href="#notation">Notational Conventions and Generic Grammar</a></h1> |
|---|
| [1099] | 529 | <p id="rfc.section.2.p.1">This specification uses the ABNF syntax defined in <a href="p1-messaging.html#notation.abnf" title="Augmented BNF">Section 2.1</a> of <a href="#Part1" id="rfc.xref.Part1.1"><cite title="HTTP/1.1, part 1: URIs, Connections, and Message Parsing">[Part1]</cite></a>. <span class="comment" id="abnf.dep">[<a href="#abnf.dep" class="smpl">abnf.dep</a>: ABNF syntax and basic rules will be adopted from RFC 5234, see <<a href="http://tools.ietf.org/wg/httpbis/trac/ticket/36">http://tools.ietf.org/wg/httpbis/trac/ticket/36</a>>.]</span> |
|---|
| [231] | 530 | </p> |
|---|
| 531 | <div id="abnf.dependencies"> |
|---|
| 532 | <p id="rfc.section.2.p.2">The ABNF rules below are defined in other specifications:</p> |
|---|
| 533 | </div> |
|---|
| 534 | <div id="rfc.figure.u.1"></div><pre class="inline"><span id="rfc.iref.g.1"></span><span id="rfc.iref.g.2"></span> challenge = <challenge, defined in <a href="#RFC2617" id="rfc.xref.RFC2617.3"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>, <a href="http://tools.ietf.org/html/rfc2617#section-1.2">Section 1.2</a>> |
|---|
| 535 | credentials = <credentials, defined in <a href="#RFC2617" id="rfc.xref.RFC2617.4"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>, <a href="http://tools.ietf.org/html/rfc2617#section-1.2">Section 1.2</a>> |
|---|
| 536 | </pre><h1 id="rfc.section.3"><a href="#rfc.section.3">3.</a> Status Code Definitions |
|---|
| 537 | </h1> |
|---|
| 538 | <div id="rfc.iref.2"></div> |
|---|
| 539 | <div id="rfc.iref.s.1"></div> |
|---|
| 540 | <h2 id="rfc.section.3.1"><a href="#rfc.section.3.1">3.1</a> <a id="status.401" href="#status.401">401 Unauthorized</a></h2> |
|---|
| 541 | <p id="rfc.section.3.1.p.1">The request requires user authentication. The response <em class="bcp14">MUST</em> include a WWW-Authenticate header field (<a href="#header.www-authenticate" id="rfc.xref.header.www-authenticate.1" title="WWW-Authenticate">Section 4.4</a>) containing a challenge applicable to the requested resource. The client <em class="bcp14">MAY</em> repeat the request with a suitable Authorization header field (<a href="#header.authorization" id="rfc.xref.header.authorization.1" title="Authorization">Section 4.1</a>). If the request already included Authorization credentials, then the 401 response indicates that authorization has been |
|---|
| 542 | refused for those credentials. If the 401 response contains the same challenge as the prior response, and the user agent has |
|---|
| 543 | already attempted authentication at least once, then the user <em class="bcp14">SHOULD</em> be presented the entity that was given in the response, since that entity might include relevant diagnostic information. HTTP |
|---|
| 544 | access authentication is explained in "HTTP Authentication: Basic and Digest Access Authentication" <a href="#RFC2617" id="rfc.xref.RFC2617.5"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>. |
|---|
| 545 | </p> |
|---|
| 546 | <div id="rfc.iref.3"></div> |
|---|
| 547 | <div id="rfc.iref.s.2"></div> |
|---|
| 548 | <h2 id="rfc.section.3.2"><a href="#rfc.section.3.2">3.2</a> <a id="status.407" href="#status.407">407 Proxy Authentication Required</a></h2> |
|---|
| 549 | <p id="rfc.section.3.2.p.1">This code is similar to 401 (Unauthorized), but indicates that the client must first authenticate itself with the proxy. The |
|---|
| 550 | proxy <em class="bcp14">MUST</em> return a Proxy-Authenticate header field (<a href="#header.proxy-authenticate" id="rfc.xref.header.proxy-authenticate.1" title="Proxy-Authenticate">Section 4.2</a>) containing a challenge applicable to the proxy for the requested resource. The client <em class="bcp14">MAY</em> repeat the request with a suitable Proxy-Authorization header field (<a href="#header.proxy-authorization" id="rfc.xref.header.proxy-authorization.1" title="Proxy-Authorization">Section 4.3</a>). HTTP access authentication is explained in "HTTP Authentication: Basic and Digest Access Authentication" <a href="#RFC2617" id="rfc.xref.RFC2617.6"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>. |
|---|
| 551 | </p> |
|---|
| 552 | <h1 id="rfc.section.4"><a href="#rfc.section.4">4.</a> <a id="header.fields" href="#header.fields">Header Field Definitions</a></h1> |
|---|
| 553 | <p id="rfc.section.4.p.1">This section defines the syntax and semantics of HTTP/1.1 header fields related to authentication.</p> |
|---|
| 554 | <div id="rfc.iref.a.1"></div> |
|---|
| 555 | <div id="rfc.iref.h.1"></div> |
|---|
| 556 | <h2 id="rfc.section.4.1"><a href="#rfc.section.4.1">4.1</a> <a id="header.authorization" href="#header.authorization">Authorization</a></h2> |
|---|
| 557 | <p id="rfc.section.4.1.p.1">A user agent that wishes to authenticate itself with a server-- usually, but not necessarily, after receiving a 401 response--does |
|---|
| 558 | so by including an Authorization request-header field with the request. The Authorization field value consists of credentials |
|---|
| 559 | containing the authentication information of the user agent for the realm of the resource being requested. |
|---|
| 560 | </p> |
|---|
| 561 | <div id="rfc.figure.u.2"></div><pre class="inline"><span id="rfc.iref.g.3"></span> Authorization = "Authorization" ":" credentials |
|---|
| 562 | </pre><p id="rfc.section.4.1.p.3">HTTP access authentication is described in "HTTP Authentication: Basic and Digest Access Authentication" <a href="#RFC2617" id="rfc.xref.RFC2617.7"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>. If a request is authenticated and a realm specified, the same credentials <em class="bcp14">SHOULD</em> be valid for all other requests within this realm (assuming that the authentication scheme itself does not require otherwise, |
|---|
| 563 | such as credentials that vary according to a challenge value or using synchronized clocks). |
|---|
| 564 | </p> |
|---|
| 565 | <p id="rfc.section.4.1.p.4">When a shared cache (see <a href="p6-cache.html#shared.and.non-shared.caches" title="Shared and Non-Shared Caches">Section 9</a> of <a href="#Part6" id="rfc.xref.Part6.1"><cite title="HTTP/1.1, part 6: Caching">[Part6]</cite></a>) receives a request containing an Authorization field, it <em class="bcp14">MUST NOT</em> return the corresponding response as a reply to any other request, unless one of the following specific exceptions holds: |
|---|
| 566 | </p> |
|---|
| 567 | <p id="rfc.section.4.1.p.5"> </p> |
|---|
| 568 | <ol> |
|---|
| 569 | <li>If the response includes the "s-maxage" cache-control directive, the cache <em class="bcp14">MAY</em> use that response in replying to a subsequent request. But (if the specified maximum age has passed) a proxy cache <em class="bcp14">MUST</em> first revalidate it with the origin server, using the request-headers from the new request to allow the origin server to authenticate |
|---|
| 570 | the new request. (This is the defined behavior for s-maxage.) If the response includes "s-maxage=0", the proxy <em class="bcp14">MUST</em> always revalidate it before re-using it. |
|---|
| 571 | </li> |
|---|
| 572 | <li>If the response includes the "must-revalidate" cache-control directive, the cache <em class="bcp14">MAY</em> use that response in replying to a subsequent request. But if the response is stale, all caches <em class="bcp14">MUST</em> first revalidate it with the origin server, using the request-headers from the new request to allow the origin server to authenticate |
|---|
| 573 | the new request. |
|---|
| 574 | </li> |
|---|
| 575 | <li>If the response includes the "public" cache-control directive, it <em class="bcp14">MAY</em> be returned in reply to any subsequent request. |
|---|
| 576 | </li> |
|---|
| 577 | </ol> |
|---|
| 578 | <div id="rfc.iref.p.1"></div> |
|---|
| 579 | <div id="rfc.iref.h.2"></div> |
|---|
| 580 | <h2 id="rfc.section.4.2"><a href="#rfc.section.4.2">4.2</a> <a id="header.proxy-authenticate" href="#header.proxy-authenticate">Proxy-Authenticate</a></h2> |
|---|
| 581 | <p id="rfc.section.4.2.p.1">The Proxy-Authenticate response-header field <em class="bcp14">MUST</em> be included as part of a 407 (Proxy Authentication Required) response. The field value consists of a challenge that indicates |
|---|
| 582 | the authentication scheme and parameters applicable to the proxy for this Request-URI. |
|---|
| 583 | </p> |
|---|
| 584 | <div id="rfc.figure.u.3"></div><pre class="inline"><span id="rfc.iref.g.4"></span> Proxy-Authenticate = "Proxy-Authenticate" ":" 1#challenge |
|---|
| 585 | </pre><p id="rfc.section.4.2.p.3">The HTTP access authentication process is described in "HTTP Authentication: Basic and Digest Access Authentication" <a href="#RFC2617" id="rfc.xref.RFC2617.8"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>. Unlike WWW-Authenticate, the Proxy-Authenticate header field applies only to the current connection and <em class="bcp14">SHOULD NOT</em> be passed on to downstream clients. However, an intermediate proxy might need to obtain its own credentials by requesting |
|---|
| 586 | them from the downstream client, which in some circumstances will appear as if the proxy is forwarding the Proxy-Authenticate |
|---|
| 587 | header field. |
|---|
| 588 | </p> |
|---|
| 589 | <div id="rfc.iref.p.2"></div> |
|---|
| 590 | <div id="rfc.iref.h.3"></div> |
|---|
| 591 | <h2 id="rfc.section.4.3"><a href="#rfc.section.4.3">4.3</a> <a id="header.proxy-authorization" href="#header.proxy-authorization">Proxy-Authorization</a></h2> |
|---|
| 592 | <p id="rfc.section.4.3.p.1">The Proxy-Authorization request-header field allows the client to identify itself (or its user) to a proxy which requires |
|---|
| 593 | authentication. The Proxy-Authorization field value consists of credentials containing the authentication information of the |
|---|
| 594 | user agent for the proxy and/or realm of the resource being requested. |
|---|
| 595 | </p> |
|---|
| 596 | <div id="rfc.figure.u.4"></div><pre class="inline"><span id="rfc.iref.g.5"></span> Proxy-Authorization = "Proxy-Authorization" ":" credentials |
|---|
| 597 | </pre><p id="rfc.section.4.3.p.3">The HTTP access authentication process is described in "HTTP Authentication: Basic and Digest Access Authentication" <a href="#RFC2617" id="rfc.xref.RFC2617.9"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>. Unlike Authorization, the Proxy-Authorization header field applies only to the next outbound proxy that demanded authentication |
|---|
| 598 | using the Proxy-Authenticate field. When multiple proxies are used in a chain, the Proxy-Authorization header field is consumed |
|---|
| 599 | by the first outbound proxy that was expecting to receive credentials. A proxy <em class="bcp14">MAY</em> relay the credentials from the client request to the next proxy if that is the mechanism by which the proxies cooperatively |
|---|
| 600 | authenticate a given request. |
|---|
| 601 | </p> |
|---|
| 602 | <div id="rfc.iref.w.1"></div> |
|---|
| 603 | <div id="rfc.iref.h.4"></div> |
|---|
| 604 | <h2 id="rfc.section.4.4"><a href="#rfc.section.4.4">4.4</a> <a id="header.www-authenticate" href="#header.www-authenticate">WWW-Authenticate</a></h2> |
|---|
| 605 | <p id="rfc.section.4.4.p.1">The WWW-Authenticate response-header field <em class="bcp14">MUST</em> be included in 401 (Unauthorized) response messages. The field value consists of at least one challenge that indicates the |
|---|
| 606 | authentication scheme(s) and parameters applicable to the Request-URI. |
|---|
| 607 | </p> |
|---|
| 608 | <div id="rfc.figure.u.5"></div><pre class="inline"><span id="rfc.iref.g.6"></span> WWW-Authenticate = "WWW-Authenticate" ":" 1#challenge |
|---|
| 609 | </pre><p id="rfc.section.4.4.p.3">The HTTP access authentication process is described in "HTTP Authentication: Basic and Digest Access Authentication" <a href="#RFC2617" id="rfc.xref.RFC2617.10"><cite title="HTTP Authentication: Basic and Digest Access Authentication">[RFC2617]</cite></a>. User agents are advised to take special care in parsing the WWW-Authenticate field value as it might contain more than one |
|---|
| 610 | challenge, or if more than one WWW-Authenticate header field is provided, the contents of a challenge itself can contain a |
|---|
| 611 | comma-separated list of authentication parameters. |
|---|
| 612 | </p> |
|---|
| 613 | <h1 id="rfc.section.5"><a href="#rfc.section.5">5.</a> <a id="IANA.considerations" href="#IANA.considerations">IANA Considerations</a></h1> |
|---|
| [1099] | 614 | <p id="rfc.section.5.p.1"> <span class="comment" id="rfc.comment.1">[<a href="#rfc.comment.1" class="smpl">rfc.comment.1</a>: TBD.]</span> |
|---|
| [231] | 615 | </p> |
|---|
| 616 | <h1 id="rfc.section.6"><a href="#rfc.section.6">6.</a> <a id="security.considerations" href="#security.considerations">Security Considerations</a></h1> |
|---|
| 617 | <p id="rfc.section.6.p.1">This section is meant to inform application developers, information providers, and users of the security limitations in HTTP/1.1 |
|---|
| 618 | as described by this document. The discussion does not include definitive solutions to the problems revealed, though it does |
|---|
| 619 | make some suggestions for reducing security risks. |
|---|
| 620 | </p> |
|---|
| 621 | <h2 id="rfc.section.6.1"><a href="#rfc.section.6.1">6.1</a> <a id="auth.credentials.and.idle.clients" href="#auth.credentials.and.idle.clients">Authentication Credentials and Idle Clients</a></h2> |
|---|
| 622 | <p id="rfc.section.6.1.p.1">Existing HTTP clients and user agents typically retain authentication information indefinitely. HTTP/1.1 does not provide |
|---|
| 623 | a method for a server to direct clients to discard these cached credentials. This is a significant defect that requires further |
|---|
| 624 | extensions to HTTP. Circumstances under which credential caching can interfere with the application's security model include |
|---|
| 625 | but are not limited to: |
|---|
| 626 | </p> |
|---|
| 627 | <ul> |
|---|
| 628 | <li>Clients which have been idle for an extended period following which the server might wish to cause the client to reprompt |
|---|
| 629 | the user for credentials. |
|---|
| 630 | </li> |
|---|
| 631 | <li>Applications which include a session termination indication (such as a `logout' or `commit' button on a page) after which |
|---|
| 632 | the server side of the application `knows' that there is no further reason for the client to retain the credentials. |
|---|
| 633 | </li> |
|---|
| 634 | </ul> |
|---|
| 635 | <p id="rfc.section.6.1.p.2">This is currently under separate study. There are a number of work-arounds to parts of this problem, and we encourage the |
|---|
| 636 | use of password protection in screen savers, idle time-outs, and other methods which mitigate the security problems inherent |
|---|
| 637 | in this problem. In particular, user agents which cache credentials are encouraged to provide a readily accessible mechanism |
|---|
| 638 | for discarding cached credentials under user control. |
|---|
| 639 | </p> |
|---|
| 640 | <h1 id="rfc.section.7"><a href="#rfc.section.7">7.</a> <a id="ack" href="#ack">Acknowledgments</a></h1> |
|---|
| 641 | <p id="rfc.section.7.p.1">TBD.</p> |
|---|
| 642 | <h1 id="rfc.references"><a id="rfc.section.8" href="#rfc.section.8">8.</a> References |
|---|
| 643 | </h1> |
|---|
| 644 | <h2 id="rfc.references.1"><a href="#rfc.section.8.1" id="rfc.section.8.1">8.1</a> Normative References |
|---|
| 645 | </h2> |
|---|
| [1099] | 646 | <table> |
|---|
| [231] | 647 | <tr> |
|---|
| 648 | <td class="reference"><b id="Part1">[Part1]</b></td> |
|---|
| [1099] | 649 | <td class="top"><a href="mailto:fielding@gbiv.com" title="Day Software">Fielding, R., Ed.</a>, <a href="mailto:jg@laptop.org" title="One Laptop per Child">Gettys, J.</a>, <a href="mailto:JeffMogul@acm.org" title="Hewlett-Packard Company">Mogul, J.</a>, <a href="mailto:henrikn@microsoft.com" title="Microsoft Corporation">Frystyk, H.</a>, <a href="mailto:LMM@acm.org" title="Adobe Systems, Incorporated">Masinter, L.</a>, <a href="mailto:paulle@microsoft.com" title="Microsoft Corporation">Leach, P.</a>, <a href="mailto:timbl@w3.org" title="World Wide Web Consortium">Berners-Lee, T.</a>, <a href="mailto:ylafon@w3.org" title="World Wide Web Consortium">Lafon, Y., Ed.</a>, and <a href="mailto:julian.reschke@greenbytes.de" title="greenbytes GmbH">J. Reschke, Ed.</a>, “<a href="http://tools.ietf.org/html/draft-ietf-httpbis-p1-messaging-02">HTTP/1.1, part 1: URIs, Connections, and Message Parsing</a>”, Internet-Draft draft-ietf-httpbis-p1-messaging-02 (work in progress), February 2008. |
|---|
| [231] | 650 | </td> |
|---|
| 651 | </tr> |
|---|
| 652 | <tr> |
|---|
| 653 | <td class="reference"><b id="Part6">[Part6]</b></td> |
|---|
| [1099] | 654 | <td class="top"><a href="mailto:fielding@gbiv.com" title="Day Software">Fielding, R., Ed.</a>, <a href="mailto:jg@laptop.org" title="One Laptop per Child">Gettys, J.</a>, <a href="mailto:JeffMogul@acm.org" title="Hewlett-Packard Company">Mogul, J.</a>, <a href="mailto:henrikn@microsoft.com" title="Microsoft Corporation">Frystyk, H.</a>, <a href="mailto:LMM@acm.org" title="Adobe Systems, Incorporated">Masinter, L.</a>, <a href="mailto:paulle@microsoft.com" title="Microsoft Corporation">Leach, P.</a>, <a href="mailto:timbl@w3.org" title="World Wide Web Consortium">Berners-Lee, T.</a>, <a href="mailto:ylafon@w3.org" title="World Wide Web Consortium">Lafon, Y., Ed.</a>, and <a href="mailto:julian.reschke@greenbytes.de" title="greenbytes GmbH">J. Reschke, Ed.</a>, “<a href="http://tools.ietf.org/html/draft-ietf-httpbis-p6-cache-02">HTTP/1.1, part 6: Caching</a>”, Internet-Draft draft-ietf-httpbis-p6-cache-02 (work in progress), February 2008. |
|---|
| [231] | 655 | </td> |
|---|
| 656 | </tr> |
|---|
| 657 | <tr> |
|---|
| 658 | <td class="reference"><b id="RFC2119">[RFC2119]</b></td> |
|---|
| [1099] | 659 | <td class="top"><a href="mailto:sob@harvard.edu" title="Harvard University">Bradner, S.</a>, “<a href="http://tools.ietf.org/html/rfc2119">Key words for use in RFCs to Indicate Requirement Levels</a>”, BCP 14, RFC 2119, March 1997. |
|---|
| [231] | 660 | </td> |
|---|
| 661 | </tr> |
|---|
| 662 | <tr> |
|---|
| 663 | <td class="reference"><b id="RFC2617">[RFC2617]</b></td> |
|---|
| [1099] | 664 | <td class="top"><a href="mailto:john@math.nwu.edu" title="Northwestern University, Department of Mathematics">Franks, J.</a>, <a href="mailto:pbaker@verisign.com" title="Verisign Inc.">Hallam-Baker, P.</a>, <a href="mailto:jeff@AbiSource.com" title="AbiSource, Inc.">Hostetler, J.</a>, <a href="mailto:lawrence@agranat.com" title="Agranat Systems, Inc.">Lawrence, S.</a>, <a href="mailto:paulle@microsoft.com" title="Microsoft Corporation">Leach, P.</a>, Luotonen, A., and <a href="mailto:stewart@OpenMarket.com" title="Open Market, Inc.">L. Stewart</a>, “<a href="http://tools.ietf.org/html/rfc2617">HTTP Authentication: Basic and Digest Access Authentication</a>”, RFC 2617, June 1999. |
|---|
| [231] | 665 | </td> |
|---|
| 666 | </tr> |
|---|
| 667 | </table> |
|---|
| 668 | <h2 id="rfc.references.2"><a href="#rfc.section.8.2" id="rfc.section.8.2">8.2</a> Informative References |
|---|
| 669 | </h2> |
|---|
| [1099] | 670 | <table> |
|---|
| [231] | 671 | <tr> |
|---|
| 672 | <td class="reference"><b id="RFC2616">[RFC2616]</b></td> |
|---|
| [1099] | 673 | <td class="top"><a href="mailto:fielding@ics.uci.edu" title="University of California, Irvine">Fielding, R.</a>, <a href="mailto:jg@w3.org" title="W3C">Gettys, J.</a>, <a href="mailto:mogul@wrl.dec.com" title="Compaq Computer Corporation">Mogul, J.</a>, <a href="mailto:frystyk@w3.org" title="MIT Laboratory for Computer Science">Frystyk, H.</a>, <a href="mailto:masinter@parc.xerox.com" title="Xerox Corporation">Masinter, L.</a>, <a href="mailto:paulle@microsoft.com" title="Microsoft Corporation">Leach, P.</a>, and <a href="mailto:timbl@w3.org" title="W3C">T. Berners-Lee</a>, “<a href="http://tools.ietf.org/html/rfc2616">Hypertext Transfer Protocol -- HTTP/1.1</a>”, RFC 2616, June 1999. |
|---|
| [231] | 674 | </td> |
|---|
| 675 | </tr> |
|---|
| 676 | </table> |
|---|
| [1099] | 677 | <div class="avoidbreak"> |
|---|
| 678 | <h1 id="rfc.authors"><a href="#rfc.authors">Authors' Addresses</a></h1> |
|---|
| 679 | <address class="vcard"><span class="vcardline"><span class="fn">Roy T. Fielding</span> |
|---|
| 680 | (editor) |
|---|
| 681 | <span class="n hidden"><span class="family-name">Fielding</span><span class="given-name">Roy T.</span></span></span><span class="org vcardline">Day Software</span><span class="adr"><span class="street-address vcardline">23 Corporate Plaza DR, Suite 280</span><span class="vcardline"><span class="locality">Newport Beach</span>, <span class="region">CA</span> <span class="postal-code">92660</span></span><span class="country-name vcardline">USA</span></span><span class="vcardline tel">Phone: <a href="tel:+1-949-706-5300"><span class="value">+1-949-706-5300</span></a></span><span class="vcardline tel"><span class="type">Fax</span>: <a href="fax:+1-949-706-5305"><span class="value">+1-949-706-5305</span></a></span><span class="vcardline">EMail: <a href="mailto:fielding@gbiv.com"><span class="email">fielding@gbiv.com</span></a></span><span class="vcardline">URI: <a href="http://roy.gbiv.com/" class="url">http://roy.gbiv.com/</a></span></address> |
|---|
| 682 | <address class="vcard"><span class="vcardline"><span class="fn">Jim Gettys</span><span class="n hidden"><span class="family-name">Gettys</span><span class="given-name">Jim</span></span></span><span class="org vcardline">One Laptop per Child</span><span class="adr"><span class="street-address vcardline">21 Oak Knoll Road</span><span class="vcardline"><span class="locality">Carlisle</span>, <span class="region">MA</span> <span class="postal-code">01741</span></span><span class="country-name vcardline">USA</span></span><span class="vcardline">EMail: <a href="mailto:jg@laptop.org"><span class="email">jg@laptop.org</span></a></span><span class="vcardline">URI: <a href="http://www.laptop.org/" class="url">http://www.laptop.org/</a></span></address> |
|---|
| 683 | <address class="vcard"><span class="vcardline"><span class="fn">Jeffrey C. Mogul</span><span class="n hidden"><span class="family-name">Mogul</span><span class="given-name">Jeffrey C.</span></span></span><span class="org vcardline">Hewlett-Packard Company</span><span class="adr"><span class="street-address vcardline">HP Labs, Large Scale Systems Group</span><span class="street-address vcardline">1501 Page Mill Road, MS 1177</span><span class="vcardline"><span class="locality">Palo Alto</span>, <span class="region">CA</span> <span class="postal-code">94304</span></span><span class="country-name vcardline">USA</span></span><span class="vcardline">EMail: <a href="mailto:JeffMogul@acm.org"><span class="email">JeffMogul@acm.org</span></a></span></address> |
|---|
| 684 | <address class="vcard"><span class="vcardline"><span class="fn">Henrik Frystyk Nielsen</span><span class="n hidden"><span class="family-name">Frystyk</span></span></span><span class="org vcardline">Microsoft Corporation</span><span class="adr"><span class="street-address vcardline">1 Microsoft Way</span><span class="vcardline"><span class="locality">Redmond</span>, <span class="region">WA</span> <span class="postal-code">98052</span></span><span class="country-name vcardline">USA</span></span><span class="vcardline">EMail: <a href="mailto:henrikn@microsoft.com"><span class="email">henrikn@microsoft.com</span></a></span></address> |
|---|
| 685 | <address class="vcard"><span class="vcardline"><span class="fn">Larry Masinter</span><span class="n hidden"><span class="family-name">Masinter</span><span class="given-name">Larry</span></span></span><span class="org vcardline">Adobe Systems, Incorporated</span><span class="adr"><span class="street-address vcardline">345 Park Ave</span><span class="vcardline"><span class="locality">San Jose</span>, <span class="region">CA</span> <span class="postal-code">95110</span></span><span class="country-name vcardline">USA</span></span><span class="vcardline">EMail: <a href="mailto:LMM@acm.org"><span class="email">LMM@acm.org</span></a></span><span class="vcardline">URI: <a href="http://larry.masinter.net/" class="url">http://larry.masinter.net/</a></span></address> |
|---|
| 686 | <address class="vcard"><span class="vcardline"><span class="fn">Paul J. Leach</span><span class="n hidden"><span class="family-name">Leach</span><span class="given-name">Paul J.</span></span></span><span class="org vcardline">Microsoft Corporation</span><span class="adr"><span class="street-address vcardline">1 Microsoft Way</span><span class="vcardline"><span class="locality">Redmond</span>, <span class="region">WA</span> <span class="postal-code">98052</span></span></span><span class="vcardline">EMail: <a href="mailto:paulle@microsoft.com"><span class="email">paulle@microsoft.com</span></a></span></address> |
|---|
| 687 | <address class="vcard"><span class="vcardline"><span class="fn">Tim Berners-Lee</span><span class="n hidden"><span class="family-name">Berners-Lee</span><span class="given-name">Tim</span></span></span><span class="org vcardline">World Wide Web Consortium</span><span class="adr"><span class="street-address vcardline">MIT Computer Science and Artificial Intelligence Laboratory</span><span class="street-address vcardline">The Stata Center, Building 32</span><span class="street-address vcardline">32 Vassar Street</span><span class="vcardline"><span class="locality">Cambridge</span>, <span class="region">MA</span> <span class="postal-code">02139</span></span><span class="country-name vcardline">USA</span></span><span class="vcardline">EMail: <a href="mailto:timbl@w3.org"><span class="email">timbl@w3.org</span></a></span><span class="vcardline">URI: <a href="http://www.w3.org/People/Berners-Lee/" class="url">http://www.w3.org/People/Berners-Lee/</a></span></address> |
|---|
| 688 | <address class="vcard"><span class="vcardline"><span class="fn">Yves Lafon</span> |
|---|
| 689 | (editor) |
|---|
| 690 | <span class="n hidden"><span class="family-name">Lafon</span><span class="given-name">Yves</span></span></span><span class="org vcardline">World Wide Web Consortium</span><span class="adr"><span class="street-address vcardline">W3C / ERCIM</span><span class="street-address vcardline">2004, rte des Lucioles</span><span class="vcardline"><span class="locality">Sophia-Antipolis</span>, <span class="region">AM</span> <span class="postal-code">06902</span></span><span class="country-name vcardline">France</span></span><span class="vcardline">EMail: <a href="mailto:ylafon@w3.org"><span class="email">ylafon@w3.org</span></a></span><span class="vcardline">URI: <a href="http://www.raubacapeu.net/people/yves/" class="url">http://www.raubacapeu.net/people/yves/</a></span></address> |
|---|
| 691 | <address class="vcard"><span class="vcardline"><span class="fn">Julian F. Reschke</span> |
|---|
| 692 | (editor) |
|---|
| 693 | <span class="n hidden"><span class="family-name">Reschke</span><span class="given-name">Julian F.</span></span></span><span class="org vcardline">greenbytes GmbH</span><span class="adr"><span class="street-address vcardline">Hafenweg 16</span><span class="vcardline"><span class="locality">Muenster</span>, <span class="region">NW</span> <span class="postal-code">48155</span></span><span class="country-name vcardline">Germany</span></span><span class="vcardline tel">Phone: <a href="tel:+492512807760"><span class="value">+49 251 2807760</span></a></span><span class="vcardline tel"><span class="type">Fax</span>: <a href="fax:+492512807761"><span class="value">+49 251 2807761</span></a></span><span class="vcardline">EMail: <a href="mailto:julian.reschke@greenbytes.de"><span class="email">julian.reschke@greenbytes.de</span></a></span><span class="vcardline">URI: <a href="http://greenbytes.de/tech/webdav/" class="url">http://greenbytes.de/tech/webdav/</a></span></address> |
|---|
| 694 | </div> |
|---|
| 695 | <h1 id="rfc.section.A" class="np"><a href="#rfc.section.A">A.</a> <a id="compatibility" href="#compatibility">Compatibility with Previous Versions</a></h1> |
|---|
| [231] | 696 | <h2 id="rfc.section.A.1"><a href="#rfc.section.A.1">A.1</a> <a id="changes.from.rfc.2616" href="#changes.from.rfc.2616">Changes from RFC 2616</a></h2> |
|---|
| 697 | <h1 id="rfc.section.B"><a href="#rfc.section.B">B.</a> Change Log (to be removed by RFC Editor before publication) |
|---|
| 698 | </h1> |
|---|
| 699 | <h2 id="rfc.section.B.1"><a href="#rfc.section.B.1">B.1</a> Since RFC2616 |
|---|
| 700 | </h2> |
|---|
| 701 | <p id="rfc.section.B.1.p.1">Extracted relevant partitions from <a href="#RFC2616" id="rfc.xref.RFC2616.2"><cite title="Hypertext Transfer Protocol -- HTTP/1.1">[RFC2616]</cite></a>. |
|---|
| 702 | </p> |
|---|
| 703 | <h2 id="rfc.section.B.2"><a href="#rfc.section.B.2">B.2</a> Since draft-ietf-httpbis-p7-auth-00 |
|---|
| 704 | </h2> |
|---|
| 705 | <p id="rfc.section.B.2.p.1">Closed issues: </p> |
|---|
| 706 | <ul> |
|---|
| 707 | <li> <<a href="http://www3.tools.ietf.org/wg/httpbis/trac/ticket/35">http://www3.tools.ietf.org/wg/httpbis/trac/ticket/35</a>>: "Normative and Informative references" |
|---|
| 708 | </li> |
|---|
| 709 | </ul> |
|---|
| 710 | <h2 id="rfc.section.B.3"><a href="#rfc.section.B.3">B.3</a> Since draft-ietf-httpbis-p7-auth-01 |
|---|
| 711 | </h2> |
|---|
| 712 | <p id="rfc.section.B.3.p.1">Ongoing work on ABNF conversion (<<a href="http://www3.tools.ietf.org/wg/httpbis/trac/ticket/36">http://www3.tools.ietf.org/wg/httpbis/trac/ticket/36</a>>): |
|---|
| 713 | </p> |
|---|
| 714 | <ul> |
|---|
| 715 | <li>Explicitly import BNF rules for "challenge" and "credentials" from RFC2617.</li> |
|---|
| 716 | <li>Add explicit references to BNF syntax and rules imported from other parts of the specification.</li> |
|---|
| 717 | </ul> |
|---|
| 718 | <h1 id="rfc.index"><a href="#rfc.index">Index</a></h1> |
|---|
| 719 | <p class="noprint"><a href="#rfc.index.4">4</a> <a href="#rfc.index.A">A</a> <a href="#rfc.index.G">G</a> <a href="#rfc.index.H">H</a> <a href="#rfc.index.P">P</a> <a href="#rfc.index.R">R</a> <a href="#rfc.index.S">S</a> <a href="#rfc.index.W">W</a> |
|---|
| 720 | </p> |
|---|
| 721 | <div class="print2col"> |
|---|
| 722 | <ul class="ind"> |
|---|
| [1099] | 723 | <li><a id="rfc.index.4" href="#rfc.index.4"><b>4</b></a><ul> |
|---|
| 724 | <li>401 Unauthorized (status code) <a href="#rfc.iref.2"><b>3.1</b></a></li> |
|---|
| 725 | <li>407 Proxy Authentication Required (status code) <a href="#rfc.iref.3"><b>3.2</b></a></li> |
|---|
| [231] | 726 | </ul> |
|---|
| 727 | </li> |
|---|
| [1099] | 728 | <li><a id="rfc.index.A" href="#rfc.index.A"><b>A</b></a><ul> |
|---|
| 729 | <li>Authorization header <a href="#rfc.xref.header.authorization.1">3.1</a>, <a href="#rfc.iref.a.1"><b>4.1</b></a></li> |
|---|
| [231] | 730 | </ul> |
|---|
| 731 | </li> |
|---|
| [1099] | 732 | <li><a id="rfc.index.G" href="#rfc.index.G"><b>G</b></a><ul> |
|---|
| 733 | <li><tt>Grammar</tt> |
|---|
| 734 | <ul> |
|---|
| 735 | <li><tt>Authorization</tt> <a href="#rfc.iref.g.3"><b>4.1</b></a></li> |
|---|
| 736 | <li><tt>challenge</tt> <a href="#rfc.iref.g.1"><b>2</b></a></li> |
|---|
| 737 | <li><tt>credentials</tt> <a href="#rfc.iref.g.2"><b>2</b></a></li> |
|---|
| 738 | <li><tt>Proxy-Authenticate</tt> <a href="#rfc.iref.g.4"><b>4.2</b></a></li> |
|---|
| 739 | <li><tt>Proxy-Authorization</tt> <a href="#rfc.iref.g.5"><b>4.3</b></a></li> |
|---|
| 740 | <li><tt>WWW-Authenticate</tt> <a href="#rfc.iref.g.6"><b>4.4</b></a></li> |
|---|
| [231] | 741 | </ul> |
|---|
| 742 | </li> |
|---|
| 743 | </ul> |
|---|
| 744 | </li> |
|---|
| [1099] | 745 | <li><a id="rfc.index.H" href="#rfc.index.H"><b>H</b></a><ul> |
|---|
| 746 | <li>Headers |
|---|
| 747 | <ul> |
|---|
| 748 | <li>Authorization <a href="#rfc.xref.header.authorization.1">3.1</a>, <a href="#rfc.iref.h.1"><b>4.1</b></a></li> |
|---|
| 749 | <li>Proxy-Authenticate <a href="#rfc.xref.header.proxy-authenticate.1">3.2</a>, <a href="#rfc.iref.h.2"><b>4.2</b></a></li> |
|---|
| 750 | <li>Proxy-Authorization <a href="#rfc.xref.header.proxy-authorization.1">3.2</a>, <a href="#rfc.iref.h.3"><b>4.3</b></a></li> |
|---|
| 751 | <li>WWW-Authenticate <a href="#rfc.xref.header.www-authenticate.1">3.1</a>, <a href="#rfc.iref.h.4"><b>4.4</b></a></li> |
|---|
| [231] | 752 | </ul> |
|---|
| 753 | </li> |
|---|
| 754 | </ul> |
|---|
| 755 | </li> |
|---|
| [1099] | 756 | <li><a id="rfc.index.P" href="#rfc.index.P"><b>P</b></a><ul> |
|---|
| 757 | <li><em>Part1</em> <a href="#rfc.xref.Part1.1">2</a>, <a href="#Part1"><b>8.1</b></a><ul> |
|---|
| 758 | <li><em>Section 2.1</em> <a href="#rfc.xref.Part1.1">2</a></li> |
|---|
| [231] | 759 | </ul> |
|---|
| 760 | </li> |
|---|
| [1099] | 761 | <li><em>Part6</em> <a href="#rfc.xref.Part6.1">4.1</a>, <a href="#Part6"><b>8.1</b></a><ul> |
|---|
| 762 | <li><em>Section 9</em> <a href="#rfc.xref.Part6.1">4.1</a></li> |
|---|
| [231] | 763 | </ul> |
|---|
| 764 | </li> |
|---|
| [1099] | 765 | <li>Proxy-Authenticate header <a href="#rfc.xref.header.proxy-authenticate.1">3.2</a>, <a href="#rfc.iref.p.1"><b>4.2</b></a></li> |
|---|
| 766 | <li>Proxy-Authorization header <a href="#rfc.xref.header.proxy-authorization.1">3.2</a>, <a href="#rfc.iref.p.2"><b>4.3</b></a></li> |
|---|
| [231] | 767 | </ul> |
|---|
| 768 | </li> |
|---|
| [1099] | 769 | <li><a id="rfc.index.R" href="#rfc.index.R"><b>R</b></a><ul> |
|---|
| 770 | <li><em>RFC2119</em> <a href="#rfc.xref.RFC2119.1">1.1</a>, <a href="#RFC2119"><b>8.1</b></a></li> |
|---|
| 771 | <li><em>RFC2616</em> <a href="#rfc.xref.RFC2616.1">1</a>, <a href="#RFC2616"><b>8.2</b></a>, <a href="#rfc.xref.RFC2616.2">B.1</a></li> |
|---|
| 772 | <li><em>RFC2617</em> <a href="#rfc.xref.RFC2617.1">1</a>, <a href="#rfc.xref.RFC2617.2">1</a>, <a href="#rfc.xref.RFC2617.3">2</a>, <a href="#rfc.xref.RFC2617.4">2</a>, <a href="#rfc.xref.RFC2617.5">3.1</a>, <a href="#rfc.xref.RFC2617.6">3.2</a>, <a href="#rfc.xref.RFC2617.7">4.1</a>, <a href="#rfc.xref.RFC2617.8">4.2</a>, <a href="#rfc.xref.RFC2617.9">4.3</a>, <a href="#rfc.xref.RFC2617.10">4.4</a>, <a href="#RFC2617"><b>8.1</b></a><ul> |
|---|
| 773 | <li><em>Section 1.2</em> <a href="#rfc.xref.RFC2617.3">2</a>, <a href="#rfc.xref.RFC2617.4">2</a></li> |
|---|
| [231] | 774 | </ul> |
|---|
| 775 | </li> |
|---|
| 776 | </ul> |
|---|
| 777 | </li> |
|---|
| [1099] | 778 | <li><a id="rfc.index.S" href="#rfc.index.S"><b>S</b></a><ul> |
|---|
| 779 | <li>Status Codes |
|---|
| 780 | <ul> |
|---|
| 781 | <li>401 Unauthorized <a href="#rfc.iref.s.1"><b>3.1</b></a></li> |
|---|
| 782 | <li>407 Proxy Authentication Required <a href="#rfc.iref.s.2"><b>3.2</b></a></li> |
|---|
| [231] | 783 | </ul> |
|---|
| 784 | </li> |
|---|
| 785 | </ul> |
|---|
| 786 | </li> |
|---|
| [1099] | 787 | <li><a id="rfc.index.W" href="#rfc.index.W"><b>W</b></a><ul> |
|---|
| 788 | <li>WWW-Authenticate header <a href="#rfc.xref.header.www-authenticate.1">3.1</a>, <a href="#rfc.iref.w.1"><b>4.4</b></a></li> |
|---|
| [231] | 789 | </ul> |
|---|
| 790 | </li> |
|---|
| 791 | </ul> |
|---|
| 792 | </div> |
|---|
| [1099] | 793 | <h1><a id="rfc.copyright" href="#rfc.copyright">Full Copyright Statement</a></h1> |
|---|
| 794 | <p>Copyright © The IETF Trust (2008).</p> |
|---|
| 795 | <p>This document is subject to the rights, licenses and restrictions contained in BCP 78, and except as set forth therein, the |
|---|
| 796 | authors retain all their rights. |
|---|
| 797 | </p> |
|---|
| 798 | <p>This document and the information contained herein are provided on an “AS IS” basis and THE CONTRIBUTOR, THE ORGANIZATION |
|---|
| 799 | HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE INTERNET SOCIETY, THE IETF TRUST AND THE INTERNET ENGINEERING TASK FORCE |
|---|
| 800 | DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION HEREIN |
|---|
| 801 | WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. |
|---|
| 802 | </p> |
|---|
| 803 | <h1><a id="rfc.ipr" href="#rfc.ipr">Intellectual Property</a></h1> |
|---|
| 804 | <p>The IETF takes no position regarding the validity or scope of any Intellectual Property Rights or other rights that might |
|---|
| 805 | be claimed to pertain to the implementation or use of the technology described in this document or the extent to which any |
|---|
| 806 | license under such rights might or might not be available; nor does it represent that it has made any independent effort to |
|---|
| 807 | identify any such rights. Information on the procedures with respect to rights in RFC documents can be found in BCP 78 and |
|---|
| 808 | BCP 79. |
|---|
| 809 | </p> |
|---|
| 810 | <p>Copies of IPR disclosures made to the IETF Secretariat and any assurances of licenses to be made available, or the result |
|---|
| 811 | of an attempt made to obtain a general license or permission for the use of such proprietary rights by implementers or users |
|---|
| 812 | of this specification can be obtained from the IETF on-line IPR repository at <a href="http://www.ietf.org/ipr">http://www.ietf.org/ipr</a>. |
|---|
| 813 | </p> |
|---|
| 814 | <p>The IETF invites any interested party to bring to its attention any copyrights, patents or patent applications, or other proprietary |
|---|
| 815 | rights that may cover technology that may be required to implement this standard. Please address the information to the IETF |
|---|
| 816 | at <a href="mailto:ietf-ipr@ietf.org">ietf-ipr@ietf.org</a>. |
|---|
| 817 | </p> |
|---|
| [231] | 818 | </body> |
|---|
| 819 | </html> |
|---|
![(please configure the [header_logo] section in trac.ini)](https://www.ietf.org/images/ietflogotrans.gif)
