| 1 | <!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd"> |
|---|
| 2 | <!-- Generated by rfcdiff 1.34: rfcdiff --> |
|---|
| 3 | <!-- <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional" > --> |
|---|
| 4 | <!-- System: CYGWIN_NT-5.1 snowball 1.5.19(0.150/4/2) 2006-01-20 13:28 i686 Cygwin --> |
|---|
| 5 | <!-- Using awk: /usr/bin/gawk: GNU Awk 3.1.5 --> |
|---|
| 6 | <!-- Using diff: /usr/bin/diff: diff (GNU diffutils) 2.8.7 --> |
|---|
| 7 | <!-- Using wdiff: : --> |
|---|
| 8 | <html> |
|---|
| 9 | <head> |
|---|
| 10 | <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1" /> |
|---|
| 11 | <meta http-equiv="Content-Style-Type" content="text/css" /> |
|---|
| 12 | <title>Diff: draft-ietf-httpbis-p7-auth-04.txt - draft-ietf-httpbis-p7-auth-05.txt</title> |
|---|
| 13 | <style type="text/css"> |
|---|
| 14 | body { margin: 0.4ex; margin-right: auto; } |
|---|
| 15 | tr { } |
|---|
| 16 | td { white-space: pre; font-family: monospace; vertical-align: top; font-size: 0.86em;} |
|---|
| 17 | th { font-size: 0.86em; } |
|---|
| 18 | .small { font-size: 0.6em; font-style: italic; font-family: Verdana, Helvetica, sans-serif; } |
|---|
| 19 | .left { background-color: #EEE; } |
|---|
| 20 | .right { background-color: #FFF; } |
|---|
| 21 | .diff { background-color: #CCF; } |
|---|
| 22 | .lblock { background-color: #BFB; } |
|---|
| 23 | .rblock { background-color: #FF8; } |
|---|
| 24 | .insert { background-color: #8FF; } |
|---|
| 25 | .delete { background-color: #ACF; } |
|---|
| 26 | .void { background-color: #FFB; } |
|---|
| 27 | .cont { background-color: #EEE; } |
|---|
| 28 | .linebr { background-color: #AAA; } |
|---|
| 29 | .lineno { color: red; background-color: #FFF; font-size: 0.7em; text-align: right; padding: 0 2px; } |
|---|
| 30 | .elipsis{ background-color: #AAA; } |
|---|
| 31 | .left .cont { background-color: #DDD; } |
|---|
| 32 | .right .cont { background-color: #EEE; } |
|---|
| 33 | .lblock .cont { background-color: #9D9; } |
|---|
| 34 | .rblock .cont { background-color: #DD6; } |
|---|
| 35 | .insert .cont { background-color: #0DD; } |
|---|
| 36 | .delete .cont { background-color: #8AD; } |
|---|
| 37 | .stats, .stats td, .stats th { background-color: #EEE; padding: 2px 0; } |
|---|
| 38 | </style> |
|---|
| 39 | </head> |
|---|
| 40 | <body > |
|---|
| 41 | <table border="0" cellpadding="0" cellspacing="0"> |
|---|
| 42 | <tr bgcolor="orange"><th></th><th> draft-ietf-httpbis-p7-auth-04.txt </th><th> </th><th> draft-ietf-httpbis-p7-auth-05.txt </th><th></th></tr> |
|---|
| 43 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 44 | <tr><td class="lineno" valign="top"></td><td class="left">Network Working Group R. Fielding, Ed.</td><td> </td><td class="right">Network Working Group R. Fielding, Ed.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 45 | <tr><td class="lineno" valign="top"></td><td class="left">Internet-Draft Day Software</td><td> </td><td class="right">Internet-Draft Day Software</td><td class="lineno" valign="top"></td></tr> |
|---|
| 46 | <tr><td class="lineno" valign="top"></td><td class="left">Obsoletes: 2616 (if approved) J. Gettys</td><td> </td><td class="right">Obsoletes: 2616 (if approved) J. Gettys</td><td class="lineno" valign="top"></td></tr> |
|---|
| 47 | <tr><td class="lineno" valign="top"></td><td class="left">Updates: 2617 (if approved) One Laptop per Child</td><td> </td><td class="right">Updates: 2617 (if approved) One Laptop per Child</td><td class="lineno" valign="top"></td></tr> |
|---|
| 48 | <tr><td class="lineno" valign="top"></td><td class="left">Intended status: Standards Track J. Mogul</td><td> </td><td class="right">Intended status: Standards Track J. Mogul</td><td class="lineno" valign="top"></td></tr> |
|---|
| 49 | <tr><td><a name="diff0001" /></td></tr> |
|---|
| 50 | <tr><td class="lineno" valign="top"></td><td class="lblock">Expires: Ma<span class="delete">rch 2, 2009</span> HP</td><td> </td><td class="rblock">Expires: Ma<span class="insert">y 20, 2009 </span> HP</td><td class="lineno" valign="top"></td></tr> |
|---|
| 51 | <tr><td class="lineno" valign="top"></td><td class="left"> H. Frystyk</td><td> </td><td class="right"> H. Frystyk</td><td class="lineno" valign="top"></td></tr> |
|---|
| 52 | <tr><td class="lineno" valign="top"></td><td class="left"> Microsoft</td><td> </td><td class="right"> Microsoft</td><td class="lineno" valign="top"></td></tr> |
|---|
| 53 | <tr><td class="lineno" valign="top"></td><td class="left"> L. Masinter</td><td> </td><td class="right"> L. Masinter</td><td class="lineno" valign="top"></td></tr> |
|---|
| 54 | <tr><td class="lineno" valign="top"></td><td class="left"> Adobe Systems</td><td> </td><td class="right"> Adobe Systems</td><td class="lineno" valign="top"></td></tr> |
|---|
| 55 | <tr><td class="lineno" valign="top"></td><td class="left"> P. Leach</td><td> </td><td class="right"> P. Leach</td><td class="lineno" valign="top"></td></tr> |
|---|
| 56 | <tr><td class="lineno" valign="top"></td><td class="left"> Microsoft</td><td> </td><td class="right"> Microsoft</td><td class="lineno" valign="top"></td></tr> |
|---|
| 57 | <tr><td class="lineno" valign="top"></td><td class="left"> T. Berners-Lee</td><td> </td><td class="right"> T. Berners-Lee</td><td class="lineno" valign="top"></td></tr> |
|---|
| 58 | <tr><td class="lineno" valign="top"></td><td class="left"> W3C/MIT</td><td> </td><td class="right"> W3C/MIT</td><td class="lineno" valign="top"></td></tr> |
|---|
| 59 | <tr><td class="lineno" valign="top"></td><td class="left"> Y. Lafon, Ed.</td><td> </td><td class="right"> Y. Lafon, Ed.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 60 | <tr><td class="lineno" valign="top"></td><td class="left"> W3C</td><td> </td><td class="right"> W3C</td><td class="lineno" valign="top"></td></tr> |
|---|
| 61 | <tr><td class="lineno" valign="top"></td><td class="left"> J. Reschke, Ed.</td><td> </td><td class="right"> J. Reschke, Ed.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 62 | <tr><td class="lineno" valign="top"></td><td class="left"> greenbytes</td><td> </td><td class="right"> greenbytes</td><td class="lineno" valign="top"></td></tr> |
|---|
| 63 | <tr><td><a name="diff0002" /></td></tr> |
|---|
| 64 | <tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete"> August 29</span>, 2008</td><td> </td><td class="rblock"> <span class="insert">November 16</span>, 2008</td><td class="lineno" valign="top"></td></tr> |
|---|
| 65 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 66 | <tr><td class="lineno" valign="top"></td><td class="left"> HTTP/1.1, part 7: Authentication</td><td> </td><td class="right"> HTTP/1.1, part 7: Authentication</td><td class="lineno" valign="top"></td></tr> |
|---|
| 67 | <tr><td><a name="diff0003" /></td></tr> |
|---|
| 68 | <tr><td class="lineno" valign="top"></td><td class="lblock"> draft-ietf-httpbis-p7-auth-0<span class="delete">4</span></td><td> </td><td class="rblock"> draft-ietf-httpbis-p7-auth-0<span class="insert">5</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 69 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 70 | <tr><td class="lineno" valign="top"></td><td class="left">Status of this Memo</td><td> </td><td class="right">Status of this Memo</td><td class="lineno" valign="top"></td></tr> |
|---|
| 71 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 72 | <tr><td class="lineno" valign="top"></td><td class="left"> By submitting this Internet-Draft, each author represents that any</td><td> </td><td class="right"> By submitting this Internet-Draft, each author represents that any</td><td class="lineno" valign="top"></td></tr> |
|---|
| 73 | <tr><td class="lineno" valign="top"></td><td class="left"> applicable patent or other IPR claims of which he or she is aware</td><td> </td><td class="right"> applicable patent or other IPR claims of which he or she is aware</td><td class="lineno" valign="top"></td></tr> |
|---|
| 74 | <tr><td class="lineno" valign="top"></td><td class="left"> have been or will be disclosed, and any of which he or she becomes</td><td> </td><td class="right"> have been or will be disclosed, and any of which he or she becomes</td><td class="lineno" valign="top"></td></tr> |
|---|
| 75 | <tr><td class="lineno" valign="top"></td><td class="left"> aware will be disclosed, in accordance with Section 6 of BCP 79.</td><td> </td><td class="right"> aware will be disclosed, in accordance with Section 6 of BCP 79.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 76 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 77 | <tr><td class="lineno" valign="top"></td><td class="left"> Internet-Drafts are working documents of the Internet Engineering</td><td> </td><td class="right"> Internet-Drafts are working documents of the Internet Engineering</td><td class="lineno" valign="top"></td></tr> |
|---|
| 78 | <tr><td class="lineno" valign="top"></td><td class="left"> Task Force (IETF), its areas, and its working groups. Note that</td><td> </td><td class="right"> Task Force (IETF), its areas, and its working groups. Note that</td><td class="lineno" valign="top"></td></tr> |
|---|
| 79 | <tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr> |
|---|
| 80 | <tr bgcolor="gray" ><td></td><th><a name="part-l2" /><small>skipping to change at</small><em> page 1, line 49</em></th><th> </th><th><a name="part-r2" /><small>skipping to change at</small><em> page 1, line 49</em></th><td></td></tr> |
|---|
| 81 | <tr><td class="lineno" valign="top"></td><td class="left"> and may be updated, replaced, or obsoleted by other documents at any</td><td> </td><td class="right"> and may be updated, replaced, or obsoleted by other documents at any</td><td class="lineno" valign="top"></td></tr> |
|---|
| 82 | <tr><td class="lineno" valign="top"></td><td class="left"> time. It is inappropriate to use Internet-Drafts as reference</td><td> </td><td class="right"> time. It is inappropriate to use Internet-Drafts as reference</td><td class="lineno" valign="top"></td></tr> |
|---|
| 83 | <tr><td class="lineno" valign="top"></td><td class="left"> material or to cite them other than as "work in progress."</td><td> </td><td class="right"> material or to cite them other than as "work in progress."</td><td class="lineno" valign="top"></td></tr> |
|---|
| 84 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 85 | <tr><td class="lineno" valign="top"></td><td class="left"> The list of current Internet-Drafts can be accessed at</td><td> </td><td class="right"> The list of current Internet-Drafts can be accessed at</td><td class="lineno" valign="top"></td></tr> |
|---|
| 86 | <tr><td class="lineno" valign="top"></td><td class="left"> http://www.ietf.org/ietf/1id-abstracts.txt.</td><td> </td><td class="right"> http://www.ietf.org/ietf/1id-abstracts.txt.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 87 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 88 | <tr><td class="lineno" valign="top"></td><td class="left"> The list of Internet-Draft Shadow Directories can be accessed at</td><td> </td><td class="right"> The list of Internet-Draft Shadow Directories can be accessed at</td><td class="lineno" valign="top"></td></tr> |
|---|
| 89 | <tr><td class="lineno" valign="top"></td><td class="left"> http://www.ietf.org/shadow.html.</td><td> </td><td class="right"> http://www.ietf.org/shadow.html.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 90 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 91 | <tr><td><a name="diff0004" /></td></tr> |
|---|
| 92 | <tr><td class="lineno" valign="top"></td><td class="lblock"> This Internet-Draft will expire on Ma<span class="delete">rch 2</span>, 2009.</td><td> </td><td class="rblock"> This Internet-Draft will expire on Ma<span class="insert">y 20</span>, 2009.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 93 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 94 | <tr><td class="lineno" valign="top"></td><td class="left">Abstract</td><td> </td><td class="right">Abstract</td><td class="lineno" valign="top"></td></tr> |
|---|
| 95 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 96 | <tr><td class="lineno" valign="top"></td><td class="left"> The Hypertext Transfer Protocol (HTTP) is an application-level</td><td> </td><td class="right"> The Hypertext Transfer Protocol (HTTP) is an application-level</td><td class="lineno" valign="top"></td></tr> |
|---|
| 97 | <tr><td class="lineno" valign="top"></td><td class="left"> protocol for distributed, collaborative, hypermedia information</td><td> </td><td class="right"> protocol for distributed, collaborative, hypermedia information</td><td class="lineno" valign="top"></td></tr> |
|---|
| 98 | <tr><td class="lineno" valign="top"></td><td class="left"> systems. HTTP has been in use by the World Wide Web global</td><td> </td><td class="right"> systems. HTTP has been in use by the World Wide Web global</td><td class="lineno" valign="top"></td></tr> |
|---|
| 99 | <tr><td class="lineno" valign="top"></td><td class="left"> information initiative since 1990. This document is Part 7 of the</td><td> </td><td class="right"> information initiative since 1990. This document is Part 7 of the</td><td class="lineno" valign="top"></td></tr> |
|---|
| 100 | <tr><td class="lineno" valign="top"></td><td class="left"> seven-part specification that defines the protocol referred to as</td><td> </td><td class="right"> seven-part specification that defines the protocol referred to as</td><td class="lineno" valign="top"></td></tr> |
|---|
| 101 | <tr><td class="lineno" valign="top"></td><td class="left"> "HTTP/1.1" and, taken together, obsoletes RFC 2616. Part 7 defines</td><td> </td><td class="right"> "HTTP/1.1" and, taken together, obsoletes RFC 2616. Part 7 defines</td><td class="lineno" valign="top"></td></tr> |
|---|
| 102 | <tr><td class="lineno" valign="top"></td><td class="left"> HTTP Authentication.</td><td> </td><td class="right"> HTTP Authentication.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 103 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 104 | <tr><td class="lineno" valign="top"></td><td class="left">Editorial Note (To be removed by RFC Editor)</td><td> </td><td class="right">Editorial Note (To be removed by RFC Editor)</td><td class="lineno" valign="top"></td></tr> |
|---|
| 105 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 106 | <tr><td class="lineno" valign="top"></td><td class="left"> Discussion of this draft should take place on the HTTPBIS working</td><td> </td><td class="right"> Discussion of this draft should take place on the HTTPBIS working</td><td class="lineno" valign="top"></td></tr> |
|---|
| 107 | <tr><td class="lineno" valign="top"></td><td class="left"> group mailing list (ietf-http-wg@w3.org). The current issues list is</td><td> </td><td class="right"> group mailing list (ietf-http-wg@w3.org). The current issues list is</td><td class="lineno" valign="top"></td></tr> |
|---|
| 108 | <tr><td><a name="diff0005" /></td></tr> |
|---|
| 109 | <tr><td class="lineno" valign="top"></td><td class="lblock"> at <http://<span class="delete">www.</span>tools.ietf.org/wg/httpbis/trac/report/11> and related</td><td> </td><td class="rblock"> at <http://tools.ietf.org/wg/httpbis/trac/report/11> and related</td><td class="lineno" valign="top"></td></tr> |
|---|
| 110 | <tr><td class="lineno" valign="top"></td><td class="left"> documents (including fancy diffs) can be found at</td><td> </td><td class="right"> documents (including fancy diffs) can be found at</td><td class="lineno" valign="top"></td></tr> |
|---|
| 111 | <tr><td><a name="diff0006" /></td></tr> |
|---|
| 112 | <tr><td class="lineno" valign="top"></td><td class="lblock"> <http://<span class="delete">www.</span>tools.ietf.org/wg/httpbis/>.</td><td> </td><td class="rblock"> <http://tools.ietf.org/wg/httpbis/>.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 113 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 114 | <tr><td><a name="diff0007" /></td></tr> |
|---|
| 115 | <tr><td class="lineno" valign="top"></td><td class="lblock"> The changes in this draft are summarized in Appendix B.<span class="delete">4</span>.</td><td> </td><td class="rblock"> The changes in this draft are summarized in Appendix B.<span class="insert">6</span>.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 116 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 117 | <tr><td class="lineno" valign="top"></td><td class="left">Table of Contents</td><td> </td><td class="right">Table of Contents</td><td class="lineno" valign="top"></td></tr> |
|---|
| 118 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 119 | <tr><td class="lineno" valign="top"></td><td class="left"> 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 4</td><td> </td><td class="right"> 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . 4</td><td class="lineno" valign="top"></td></tr> |
|---|
| 120 | <tr><td class="lineno" valign="top"></td><td class="left"> 1.1. Requirements . . . . . . . . . . . . . . . . . . . . . . . 4</td><td> </td><td class="right"> 1.1. Requirements . . . . . . . . . . . . . . . . . . . . . . . 4</td><td class="lineno" valign="top"></td></tr> |
|---|
| 121 | <tr><td class="lineno" valign="top"></td><td class="left"> 2. Notational Conventions and Generic Grammar . . . . . . . . . . 4</td><td> </td><td class="right"> 2. Notational Conventions and Generic Grammar . . . . . . . . . . 4</td><td class="lineno" valign="top"></td></tr> |
|---|
| 122 | <tr><td class="lineno" valign="top"></td><td class="left"> 3. Status Code Definitions . . . . . . . . . . . . . . . . . . . 5</td><td> </td><td class="right"> 3. Status Code Definitions . . . . . . . . . . . . . . . . . . . 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 123 | <tr><td class="lineno" valign="top"></td><td class="left"> 3.1. 401 Unauthorized . . . . . . . . . . . . . . . . . . . . . 5</td><td> </td><td class="right"> 3.1. 401 Unauthorized . . . . . . . . . . . . . . . . . . . . . 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 124 | <tr><td class="lineno" valign="top"></td><td class="left"> 3.2. 407 Proxy Authentication Required . . . . . . . . . . . . 5</td><td> </td><td class="right"> 3.2. 407 Proxy Authentication Required . . . . . . . . . . . . 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 125 | <tr><td class="lineno" valign="top"></td><td class="left"> 4. Header Field Definitions . . . . . . . . . . . . . . . . . . . 5</td><td> </td><td class="right"> 4. Header Field Definitions . . . . . . . . . . . . . . . . . . . 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 126 | <tr><td class="lineno" valign="top"></td><td class="left"> 4.1. Authorization . . . . . . . . . . . . . . . . . . . . . . 5</td><td> </td><td class="right"> 4.1. Authorization . . . . . . . . . . . . . . . . . . . . . . 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 127 | <tr><td class="lineno" valign="top"></td><td class="left"> 4.2. Proxy-Authenticate . . . . . . . . . . . . . . . . . . . . 6</td><td> </td><td class="right"> 4.2. Proxy-Authenticate . . . . . . . . . . . . . . . . . . . . 6</td><td class="lineno" valign="top"></td></tr> |
|---|
| 128 | <tr><td class="lineno" valign="top"></td><td class="left"> 4.3. Proxy-Authorization . . . . . . . . . . . . . . . . . . . 7</td><td> </td><td class="right"> 4.3. Proxy-Authorization . . . . . . . . . . . . . . . . . . . 7</td><td class="lineno" valign="top"></td></tr> |
|---|
| 129 | <tr><td class="lineno" valign="top"></td><td class="left"> 4.4. WWW-Authenticate . . . . . . . . . . . . . . . . . . . . . 7</td><td> </td><td class="right"> 4.4. WWW-Authenticate . . . . . . . . . . . . . . . . . . . . . 7</td><td class="lineno" valign="top"></td></tr> |
|---|
| 130 | <tr><td class="lineno" valign="top"></td><td class="left"> 5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 7</td><td> </td><td class="right"> 5. IANA Considerations . . . . . . . . . . . . . . . . . . . . . 7</td><td class="lineno" valign="top"></td></tr> |
|---|
| 131 | <tr><td><a name="diff0008" /></td></tr> |
|---|
| 132 | <tr><td class="lineno" valign="top"></td><td class="lblock"> 5.1. Message Header Registration . . . . . . . . . . . . . . . <span class="delete">7</span></td><td> </td><td class="rblock"> 5.1. Message Header Registration . . . . . . . . . . . . . . . <span class="insert">8</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 133 | <tr><td class="lineno" valign="top"></td><td class="left"> 6. Security Considerations . . . . . . . . . . . . . . . . . . . 8</td><td> </td><td class="right"> 6. Security Considerations . . . . . . . . . . . . . . . . . . . 8</td><td class="lineno" valign="top"></td></tr> |
|---|
| 134 | <tr><td class="lineno" valign="top"></td><td class="left"> 6.1. Authentication Credentials and Idle Clients . . . . . . . 8</td><td> </td><td class="right"> 6.1. Authentication Credentials and Idle Clients . . . . . . . 8</td><td class="lineno" valign="top"></td></tr> |
|---|
| 135 | <tr><td class="lineno" valign="top"></td><td class="left"> 7. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 9</td><td> </td><td class="right"> 7. Acknowledgments . . . . . . . . . . . . . . . . . . . . . . . 9</td><td class="lineno" valign="top"></td></tr> |
|---|
| 136 | <tr><td class="lineno" valign="top"></td><td class="left"> 8. References . . . . . . . . . . . . . . . . . . . . . . . . . . 9</td><td> </td><td class="right"> 8. References . . . . . . . . . . . . . . . . . . . . . . . . . . 9</td><td class="lineno" valign="top"></td></tr> |
|---|
| 137 | <tr><td class="lineno" valign="top"></td><td class="left"> 8.1. Normative References . . . . . . . . . . . . . . . . . . . 9</td><td> </td><td class="right"> 8.1. Normative References . . . . . . . . . . . . . . . . . . . 9</td><td class="lineno" valign="top"></td></tr> |
|---|
| 138 | <tr><td class="lineno" valign="top"></td><td class="left"> 8.2. Informative References . . . . . . . . . . . . . . . . . . 9</td><td> </td><td class="right"> 8.2. Informative References . . . . . . . . . . . . . . . . . . 9</td><td class="lineno" valign="top"></td></tr> |
|---|
| 139 | <tr><td><a name="diff0009" /></td></tr> |
|---|
| 140 | <tr><td class="lineno" valign="top"></td><td class="lblock"> Appendix A. Compatibility with Previous Versions . . . . . . . . <span class="delete"> 9</span></td><td> </td><td class="rblock"> Appendix A. Compatibility with Previous Versions . . . . . . . . <span class="insert">10</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 141 | <tr><td class="lineno" valign="top"></td><td class="lblock"> A.1. Changes from RFC 2616 . . . . . . . . . . . . . . . . . . <span class="delete"> 9</span></td><td> </td><td class="rblock"> A.1. Changes from RFC 2616 . . . . . . . . . . . . . . . . . . <span class="insert">10</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 142 | <tr><td class="lineno" valign="top"></td><td class="left"> Appendix B. Change Log (to be removed by RFC Editor before</td><td> </td><td class="right"> Appendix B. Change Log (to be removed by RFC Editor before</td><td class="lineno" valign="top"></td></tr> |
|---|
| 143 | <tr><td><a name="diff0010" /></td></tr> |
|---|
| 144 | <tr><td class="lineno" valign="top"></td><td class="lblock"> publication) . . . . . . . . . . . . . . . . . . . . <span class="delete"> 9</span></td><td> </td><td class="rblock"> publication) . . . . . . . . . . . . . . . . . . . . <span class="insert">10</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 145 | <tr><td class="lineno" valign="top"></td><td class="left"> B.1. Since RFC2616 . . . . . . . . . . . . . . . . . . . . . . 10</td><td> </td><td class="right"> B.1. Since RFC2616 . . . . . . . . . . . . . . . . . . . . . . 10</td><td class="lineno" valign="top"></td></tr> |
|---|
| 146 | <tr><td class="lineno" valign="top"></td><td class="left"> B.2. Since draft-ietf-httpbis-p7-auth-00 . . . . . . . . . . . 10</td><td> </td><td class="right"> B.2. Since draft-ietf-httpbis-p7-auth-00 . . . . . . . . . . . 10</td><td class="lineno" valign="top"></td></tr> |
|---|
| 147 | <tr><td class="lineno" valign="top"></td><td class="left"> B.3. Since draft-ietf-httpbis-p7-auth-01 . . . . . . . . . . . 10</td><td> </td><td class="right"> B.3. Since draft-ietf-httpbis-p7-auth-01 . . . . . . . . . . . 10</td><td class="lineno" valign="top"></td></tr> |
|---|
| 148 | <tr><td class="lineno" valign="top"></td><td class="left"> B.4. Since draft-ietf-httpbis-p7-auth-02 . . . . . . . . . . . 10</td><td> </td><td class="right"> B.4. Since draft-ietf-httpbis-p7-auth-02 . . . . . . . . . . . 10</td><td class="lineno" valign="top"></td></tr> |
|---|
| 149 | <tr><td class="lineno" valign="top"></td><td class="left"> B.5. Since draft-ietf-httpbis-p7-auth-03 . . . . . . . . . . . 10</td><td> </td><td class="right"> B.5. Since draft-ietf-httpbis-p7-auth-03 . . . . . . . . . . . 10</td><td class="lineno" valign="top"></td></tr> |
|---|
| 150 | <tr><td><a name="diff0011" /></td></tr> |
|---|
| 151 | <tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">Index . . . . . . . . . . . . . . . . . . .</span> . . . . . . . . . . . 10</td><td> </td><td class="rblock"> <span class="insert"> B.6. Since draft-ietf-httpbis-p7-auth-04 </span> . . . . . . . . . . . 10</td><td class="lineno" valign="top"></td></tr> |
|---|
| 152 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 153 | <tr><td class="lineno" valign="top"></td><td class="left"> Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 11</td><td> </td><td class="right"> Authors' Addresses . . . . . . . . . . . . . . . . . . . . . . . . 11</td><td class="lineno" valign="top"></td></tr> |
|---|
| 154 | <tr><td><a name="diff0012" /></td></tr> |
|---|
| 155 | <tr><td class="lineno" valign="top"></td><td class="lblock"> Intellectual Property and Copyright Statements . . . . . . . . . . 1<span class="delete">4</span></td><td> </td><td class="rblock"> Intellectual Property and Copyright Statements . . . . . . . . . . 1<span class="insert">5</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 156 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 157 | <tr><td class="lineno" valign="top"></td><td class="left">1. Introduction</td><td> </td><td class="right">1. Introduction</td><td class="lineno" valign="top"></td></tr> |
|---|
| 158 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 159 | <tr><td class="lineno" valign="top"></td><td class="left"> This document defines HTTP/1.1 access control and authentication.</td><td> </td><td class="right"> This document defines HTTP/1.1 access control and authentication.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 160 | <tr><td class="lineno" valign="top"></td><td class="left"> Right now it includes the extracted relevant sections of RFC 2616</td><td> </td><td class="right"> Right now it includes the extracted relevant sections of RFC 2616</td><td class="lineno" valign="top"></td></tr> |
|---|
| 161 | <tr><td class="lineno" valign="top"></td><td class="left"> with only minor changes. The intention is to move the general</td><td> </td><td class="right"> with only minor changes. The intention is to move the general</td><td class="lineno" valign="top"></td></tr> |
|---|
| 162 | <tr><td class="lineno" valign="top"></td><td class="left"> framework for HTTP authentication here, as currently specified in</td><td> </td><td class="right"> framework for HTTP authentication here, as currently specified in</td><td class="lineno" valign="top"></td></tr> |
|---|
| 163 | <tr><td class="lineno" valign="top"></td><td class="left"> [RFC2617], and allow the individual authentication mechanisms to be</td><td> </td><td class="right"> [RFC2617], and allow the individual authentication mechanisms to be</td><td class="lineno" valign="top"></td></tr> |
|---|
| 164 | <tr><td class="lineno" valign="top"></td><td class="left"> defined elsewhere. This introduction will be rewritten when that</td><td> </td><td class="right"> defined elsewhere. This introduction will be rewritten when that</td><td class="lineno" valign="top"></td></tr> |
|---|
| 165 | <tr><td class="lineno" valign="top"></td><td class="left"> occurs.</td><td> </td><td class="right"> occurs.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 166 | <tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr> |
|---|
| 167 | <tr bgcolor="gray" ><td></td><th><a name="part-l3" /><small>skipping to change at</small><em> page 4, line 42</em></th><th> </th><th><a name="part-r3" /><small>skipping to change at</small><em> page 4, line 42</em></th><td></td></tr> |
|---|
| 168 | <tr><td class="lineno" valign="top"></td><td class="left"> implements. An implementation that satisfies all the MUST or</td><td> </td><td class="right"> implements. An implementation that satisfies all the MUST or</td><td class="lineno" valign="top"></td></tr> |
|---|
| 169 | <tr><td class="lineno" valign="top"></td><td class="left"> REQUIRED level and all the SHOULD level requirements for its</td><td> </td><td class="right"> REQUIRED level and all the SHOULD level requirements for its</td><td class="lineno" valign="top"></td></tr> |
|---|
| 170 | <tr><td class="lineno" valign="top"></td><td class="left"> protocols is said to be "unconditionally compliant"; one that</td><td> </td><td class="right"> protocols is said to be "unconditionally compliant"; one that</td><td class="lineno" valign="top"></td></tr> |
|---|
| 171 | <tr><td class="lineno" valign="top"></td><td class="left"> satisfies all the MUST level requirements but not all the SHOULD</td><td> </td><td class="right"> satisfies all the MUST level requirements but not all the SHOULD</td><td class="lineno" valign="top"></td></tr> |
|---|
| 172 | <tr><td class="lineno" valign="top"></td><td class="left"> level requirements for its protocols is said to be "conditionally</td><td> </td><td class="right"> level requirements for its protocols is said to be "conditionally</td><td class="lineno" valign="top"></td></tr> |
|---|
| 173 | <tr><td class="lineno" valign="top"></td><td class="left"> compliant."</td><td> </td><td class="right"> compliant."</td><td class="lineno" valign="top"></td></tr> |
|---|
| 174 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 175 | <tr><td class="lineno" valign="top"></td><td class="left">2. Notational Conventions and Generic Grammar</td><td> </td><td class="right">2. Notational Conventions and Generic Grammar</td><td class="lineno" valign="top"></td></tr> |
|---|
| 176 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 177 | <tr><td class="lineno" valign="top"></td><td class="left"> This specification uses the ABNF syntax defined in Section 2.1 of</td><td> </td><td class="right"> This specification uses the ABNF syntax defined in Section 2.1 of</td><td class="lineno" valign="top"></td></tr> |
|---|
| 178 | <tr><td><a name="diff0013" /></td></tr> |
|---|
| 179 | <tr><td class="lineno" valign="top"></td><td class="lblock"> [Part1].<span class="delete"> [[abnf.dep: ABNF syntax and basic rules will be adopted from</span></td><td> </td><td class="rblock"> [Part1].</td><td class="lineno" valign="top"></td></tr> |
|---|
| 180 | <tr><td class="lineno" valign="top"></td><td class="lblock"><span class="delete"> RFC 5234, see <http://tools.ietf.org/wg/httpbis/trac/ticket/36>.]]</span></td><td> </td><td class="rblock"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 181 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 182 | <tr><td class="lineno" valign="top"></td><td class="left"> The ABNF rules below are defined in other specifications:</td><td> </td><td class="right"> The ABNF rules below are defined in other specifications:</td><td class="lineno" valign="top"></td></tr> |
|---|
| 183 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 184 | <tr><td><a name="diff0014" /></td></tr> |
|---|
| 185 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> OWS = <OWS, defined in [Part1], Section 2.2></span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 186 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> </span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 187 | <tr><td class="lineno" valign="top"></td><td class="left"> challenge = <challenge, defined in [RFC2617], Section 1.2></td><td> </td><td class="right"> challenge = <challenge, defined in [RFC2617], Section 1.2></td><td class="lineno" valign="top"></td></tr> |
|---|
| 188 | <tr><td class="lineno" valign="top"></td><td class="left"> credentials = <credentials, defined in [RFC2617], Section 1.2></td><td> </td><td class="right"> credentials = <credentials, defined in [RFC2617], Section 1.2></td><td class="lineno" valign="top"></td></tr> |
|---|
| 189 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 190 | <tr><td class="lineno" valign="top"></td><td class="left">3. Status Code Definitions</td><td> </td><td class="right">3. Status Code Definitions</td><td class="lineno" valign="top"></td></tr> |
|---|
| 191 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 192 | <tr><td class="lineno" valign="top"></td><td class="left">3.1. 401 Unauthorized</td><td> </td><td class="right">3.1. 401 Unauthorized</td><td class="lineno" valign="top"></td></tr> |
|---|
| 193 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 194 | <tr><td class="lineno" valign="top"></td><td class="left"> The request requires user authentication. The response MUST include</td><td> </td><td class="right"> The request requires user authentication. The response MUST include</td><td class="lineno" valign="top"></td></tr> |
|---|
| 195 | <tr><td class="lineno" valign="top"></td><td class="left"> a WWW-Authenticate header field (Section 4.4) containing a challenge</td><td> </td><td class="right"> a WWW-Authenticate header field (Section 4.4) containing a challenge</td><td class="lineno" valign="top"></td></tr> |
|---|
| 196 | <tr><td class="lineno" valign="top"></td><td class="left"> applicable to the requested resource. The client MAY repeat the</td><td> </td><td class="right"> applicable to the requested resource. The client MAY repeat the</td><td class="lineno" valign="top"></td></tr> |
|---|
| 197 | <tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr> |
|---|
| 198 | <tr bgcolor="gray" ><td></td><th><a name="part-l4" /><small>skipping to change at</small><em> page 5, line 44</em></th><th> </th><th><a name="part-r4" /><small>skipping to change at</small><em> page 5, line 44</em></th><td></td></tr> |
|---|
| 199 | <tr><td class="lineno" valign="top"></td><td class="left">4. Header Field Definitions</td><td> </td><td class="right">4. Header Field Definitions</td><td class="lineno" valign="top"></td></tr> |
|---|
| 200 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 201 | <tr><td class="lineno" valign="top"></td><td class="left"> This section defines the syntax and semantics of HTTP/1.1 header</td><td> </td><td class="right"> This section defines the syntax and semantics of HTTP/1.1 header</td><td class="lineno" valign="top"></td></tr> |
|---|
| 202 | <tr><td class="lineno" valign="top"></td><td class="left"> fields related to authentication.</td><td> </td><td class="right"> fields related to authentication.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 203 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 204 | <tr><td class="lineno" valign="top"></td><td class="left">4.1. Authorization</td><td> </td><td class="right">4.1. Authorization</td><td class="lineno" valign="top"></td></tr> |
|---|
| 205 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 206 | <tr><td class="lineno" valign="top"></td><td class="left"> A user agent that wishes to authenticate itself with a server--</td><td> </td><td class="right"> A user agent that wishes to authenticate itself with a server--</td><td class="lineno" valign="top"></td></tr> |
|---|
| 207 | <tr><td class="lineno" valign="top"></td><td class="left"> usually, but not necessarily, after receiving a 401 response--does so</td><td> </td><td class="right"> usually, but not necessarily, after receiving a 401 response--does so</td><td class="lineno" valign="top"></td></tr> |
|---|
| 208 | <tr><td class="lineno" valign="top"></td><td class="left"> by including an Authorization request-header field with the request.</td><td> </td><td class="right"> by including an Authorization request-header field with the request.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 209 | <tr><td><a name="diff0015" /></td></tr> |
|---|
| 210 | <tr><td class="lineno" valign="top"></td><td class="lblock"> The <span class="delete">Authorization field value</span> consists of credentials containing the</td><td> </td><td class="rblock"> The <span class="insert">field "Authorization"</span> consists of credentials containing the</td><td class="lineno" valign="top"></td></tr> |
|---|
| 211 | <tr><td class="lineno" valign="top"></td><td class="left"> authentication information of the user agent for the realm of the</td><td> </td><td class="right"> authentication information of the user agent for the realm of the</td><td class="lineno" valign="top"></td></tr> |
|---|
| 212 | <tr><td class="lineno" valign="top"></td><td class="left"> resource being requested.</td><td> </td><td class="right"> resource being requested.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 213 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 214 | <tr><td><a name="diff0016" /></td></tr> |
|---|
| 215 | <tr><td class="lineno" valign="top"></td><td class="lblock"> Authorization <span class="delete">= "Authorization" ":" credentials</span></td><td> </td><td class="rblock"> Authorization <span class="insert"> = "Authorization" ":" OWS Authorization-v</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 216 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Authorization-v = credentials</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 217 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 218 | <tr><td class="lineno" valign="top"></td><td class="left"> HTTP access authentication is described in "HTTP Authentication:</td><td> </td><td class="right"> HTTP access authentication is described in "HTTP Authentication:</td><td class="lineno" valign="top"></td></tr> |
|---|
| 219 | <tr><td><a name="diff0017" /></td></tr> |
|---|
| 220 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> </span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 221 | <tr><td class="lineno" valign="top"></td><td class="left"> Basic and Digest Access Authentication" [RFC2617]. If a request is</td><td> </td><td class="right"> Basic and Digest Access Authentication" [RFC2617]. If a request is</td><td class="lineno" valign="top"></td></tr> |
|---|
| 222 | <tr><td class="lineno" valign="top"></td><td class="left"> authenticated and a realm specified, the same credentials SHOULD be</td><td> </td><td class="right"> authenticated and a realm specified, the same credentials SHOULD be</td><td class="lineno" valign="top"></td></tr> |
|---|
| 223 | <tr><td class="lineno" valign="top"></td><td class="left"> valid for all other requests within this realm (assuming that the</td><td> </td><td class="right"> valid for all other requests within this realm (assuming that the</td><td class="lineno" valign="top"></td></tr> |
|---|
| 224 | <tr><td class="lineno" valign="top"></td><td class="left"> authentication scheme itself does not require otherwise, such as</td><td> </td><td class="right"> authentication scheme itself does not require otherwise, such as</td><td class="lineno" valign="top"></td></tr> |
|---|
| 225 | <tr><td class="lineno" valign="top"></td><td class="left"> credentials that vary according to a challenge value or using</td><td> </td><td class="right"> credentials that vary according to a challenge value or using</td><td class="lineno" valign="top"></td></tr> |
|---|
| 226 | <tr><td class="lineno" valign="top"></td><td class="left"> synchronized clocks).</td><td> </td><td class="right"> synchronized clocks).</td><td class="lineno" valign="top"></td></tr> |
|---|
| 227 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 228 | <tr><td class="lineno" valign="top"></td><td class="left"> When a shared cache (see Section 9 of [Part6]) receives a request</td><td> </td><td class="right"> When a shared cache (see Section 9 of [Part6]) receives a request</td><td class="lineno" valign="top"></td></tr> |
|---|
| 229 | <tr><td class="lineno" valign="top"></td><td class="left"> containing an Authorization field, it MUST NOT return the</td><td> </td><td class="right"> containing an Authorization field, it MUST NOT return the</td><td class="lineno" valign="top"></td></tr> |
|---|
| 230 | <tr><td class="lineno" valign="top"></td><td class="left"> corresponding response as a reply to any other request, unless one of</td><td> </td><td class="right"> corresponding response as a reply to any other request, unless one of</td><td class="lineno" valign="top"></td></tr> |
|---|
| 231 | <tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr> |
|---|
| 232 | <tr bgcolor="gray" ><td></td><th><a name="part-l5" /><small>skipping to change at</small><em> page 6, line 36</em></th><th> </th><th><a name="part-r5" /><small>skipping to change at</small><em> page 6, line 38</em></th><td></td></tr> |
|---|
| 233 | <tr><td class="lineno" valign="top"></td><td class="left"> subsequent request. But if the response is stale, all caches</td><td> </td><td class="right"> subsequent request. But if the response is stale, all caches</td><td class="lineno" valign="top"></td></tr> |
|---|
| 234 | <tr><td class="lineno" valign="top"></td><td class="left"> MUST first revalidate it with the origin server, using the</td><td> </td><td class="right"> MUST first revalidate it with the origin server, using the</td><td class="lineno" valign="top"></td></tr> |
|---|
| 235 | <tr><td class="lineno" valign="top"></td><td class="left"> request-headers from the new request to allow the origin server</td><td> </td><td class="right"> request-headers from the new request to allow the origin server</td><td class="lineno" valign="top"></td></tr> |
|---|
| 236 | <tr><td class="lineno" valign="top"></td><td class="left"> to authenticate the new request.</td><td> </td><td class="right"> to authenticate the new request.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 237 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 238 | <tr><td class="lineno" valign="top"></td><td class="left"> 3. If the response includes the "public" cache-control directive, it</td><td> </td><td class="right"> 3. If the response includes the "public" cache-control directive, it</td><td class="lineno" valign="top"></td></tr> |
|---|
| 239 | <tr><td class="lineno" valign="top"></td><td class="left"> MAY be returned in reply to any subsequent request.</td><td> </td><td class="right"> MAY be returned in reply to any subsequent request.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 240 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 241 | <tr><td class="lineno" valign="top"></td><td class="left">4.2. Proxy-Authenticate</td><td> </td><td class="right">4.2. Proxy-Authenticate</td><td class="lineno" valign="top"></td></tr> |
|---|
| 242 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 243 | <tr><td><a name="diff0018" /></td></tr> |
|---|
| 244 | <tr><td class="lineno" valign="top"></td><td class="lblock"> The <span class="delete">Proxy-Authenticate response-header field MUST be included as part</span></td><td> </td><td class="rblock"> The <span class="insert">response-header field "Proxy-Authenticate" MUST be included as</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 245 | <tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">of a 407 (Proxy Authentication Required) response. The field value</span></td><td> </td><td class="rblock"> <span class="insert">part of a 407 (Proxy Authentication Required) response. The field</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 246 | <tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">consists of a challenge that indicates the authentication scheme and</span></td><td> </td><td class="rblock"> <span class="insert">value consists of a challenge that indicates the authentication</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 247 | <tr><td class="lineno" valign="top"></td><td class="lblock"> parameters applicable to the proxy for this Request-URI.</td><td> </td><td class="rblock"> <span class="insert">scheme and </span>parameters applicable to the proxy for this Request-URI.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 248 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 249 | <tr><td><a name="diff0019" /></td></tr> |
|---|
| 250 | <tr><td class="lineno" valign="top"></td><td class="lblock"> Proxy-Authenticate <span class="delete">= "Proxy-Authenticate" ":" 1#challenge</span></td><td> </td><td class="rblock"> Proxy-Authenticate <span class="insert"> = "Proxy-Authenticate" ":" OWS</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 251 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Proxy-Authenticate-v</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 252 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Proxy-Authenticate-v = 1#challenge</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 253 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 254 | <tr><td class="lineno" valign="top"></td><td class="left"> The HTTP access authentication process is described in "HTTP</td><td> </td><td class="right"> The HTTP access authentication process is described in "HTTP</td><td class="lineno" valign="top"></td></tr> |
|---|
| 255 | <tr><td class="lineno" valign="top"></td><td class="left"> Authentication: Basic and Digest Access Authentication" [RFC2617].</td><td> </td><td class="right"> Authentication: Basic and Digest Access Authentication" [RFC2617].</td><td class="lineno" valign="top"></td></tr> |
|---|
| 256 | <tr><td class="lineno" valign="top"></td><td class="left"> Unlike WWW-Authenticate, the Proxy-Authenticate header field applies</td><td> </td><td class="right"> Unlike WWW-Authenticate, the Proxy-Authenticate header field applies</td><td class="lineno" valign="top"></td></tr> |
|---|
| 257 | <tr><td class="lineno" valign="top"></td><td class="left"> only to the current connection and SHOULD NOT be passed on to</td><td> </td><td class="right"> only to the current connection and SHOULD NOT be passed on to</td><td class="lineno" valign="top"></td></tr> |
|---|
| 258 | <tr><td class="lineno" valign="top"></td><td class="left"> downstream clients. However, an intermediate proxy might need to</td><td> </td><td class="right"> downstream clients. However, an intermediate proxy might need to</td><td class="lineno" valign="top"></td></tr> |
|---|
| 259 | <tr><td class="lineno" valign="top"></td><td class="left"> obtain its own credentials by requesting them from the downstream</td><td> </td><td class="right"> obtain its own credentials by requesting them from the downstream</td><td class="lineno" valign="top"></td></tr> |
|---|
| 260 | <tr><td class="lineno" valign="top"></td><td class="left"> client, which in some circumstances will appear as if the proxy is</td><td> </td><td class="right"> client, which in some circumstances will appear as if the proxy is</td><td class="lineno" valign="top"></td></tr> |
|---|
| 261 | <tr><td class="lineno" valign="top"></td><td class="left"> forwarding the Proxy-Authenticate header field.</td><td> </td><td class="right"> forwarding the Proxy-Authenticate header field.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 262 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 263 | <tr><td class="lineno" valign="top"></td><td class="left">4.3. Proxy-Authorization</td><td> </td><td class="right">4.3. Proxy-Authorization</td><td class="lineno" valign="top"></td></tr> |
|---|
| 264 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 265 | <tr><td><a name="diff0020" /></td></tr> |
|---|
| 266 | <tr><td class="lineno" valign="top"></td><td class="lblock"> The <span class="delete">Proxy-Authorization request-header field</span> allows the client to</td><td> </td><td class="rblock"> The <span class="insert">request-header field "Proxy-Authorization"</span> allows the client to</td><td class="lineno" valign="top"></td></tr> |
|---|
| 267 | <tr><td class="lineno" valign="top"></td><td class="left"> identify itself (or its user) to a proxy which requires</td><td> </td><td class="right"> identify itself (or its user) to a proxy which requires</td><td class="lineno" valign="top"></td></tr> |
|---|
| 268 | <tr><td class="lineno" valign="top"></td><td class="left"> authentication. The Proxy-Authorization field value consists of</td><td> </td><td class="right"> authentication. The Proxy-Authorization field value consists of</td><td class="lineno" valign="top"></td></tr> |
|---|
| 269 | <tr><td class="lineno" valign="top"></td><td class="left"> credentials containing the authentication information of the user</td><td> </td><td class="right"> credentials containing the authentication information of the user</td><td class="lineno" valign="top"></td></tr> |
|---|
| 270 | <tr><td class="lineno" valign="top"></td><td class="left"> agent for the proxy and/or realm of the resource being requested.</td><td> </td><td class="right"> agent for the proxy and/or realm of the resource being requested.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 271 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 272 | <tr><td><a name="diff0021" /></td></tr> |
|---|
| 273 | <tr><td class="lineno" valign="top"></td><td class="lblock"> Proxy-Authorization <span class="delete"> = "Proxy-Authorization" ":" credentials</span></td><td> </td><td class="rblock"> Proxy-Authorization <span class="insert">= "Proxy-Authorization" ":" OWS</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 274 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Proxy-Authorization-v</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 275 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Proxy-Authorization-v = credentials</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 276 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 277 | <tr><td class="lineno" valign="top"></td><td class="left"> The HTTP access authentication process is described in "HTTP</td><td> </td><td class="right"> The HTTP access authentication process is described in "HTTP</td><td class="lineno" valign="top"></td></tr> |
|---|
| 278 | <tr><td class="lineno" valign="top"></td><td class="left"> Authentication: Basic and Digest Access Authentication" [RFC2617].</td><td> </td><td class="right"> Authentication: Basic and Digest Access Authentication" [RFC2617].</td><td class="lineno" valign="top"></td></tr> |
|---|
| 279 | <tr><td class="lineno" valign="top"></td><td class="left"> Unlike Authorization, the Proxy-Authorization header field applies</td><td> </td><td class="right"> Unlike Authorization, the Proxy-Authorization header field applies</td><td class="lineno" valign="top"></td></tr> |
|---|
| 280 | <tr><td class="lineno" valign="top"></td><td class="left"> only to the next outbound proxy that demanded authentication using</td><td> </td><td class="right"> only to the next outbound proxy that demanded authentication using</td><td class="lineno" valign="top"></td></tr> |
|---|
| 281 | <tr><td class="lineno" valign="top"></td><td class="left"> the Proxy-Authenticate field. When multiple proxies are used in a</td><td> </td><td class="right"> the Proxy-Authenticate field. When multiple proxies are used in a</td><td class="lineno" valign="top"></td></tr> |
|---|
| 282 | <tr><td class="lineno" valign="top"></td><td class="left"> chain, the Proxy-Authorization header field is consumed by the first</td><td> </td><td class="right"> chain, the Proxy-Authorization header field is consumed by the first</td><td class="lineno" valign="top"></td></tr> |
|---|
| 283 | <tr><td class="lineno" valign="top"></td><td class="left"> outbound proxy that was expecting to receive credentials. A proxy</td><td> </td><td class="right"> outbound proxy that was expecting to receive credentials. A proxy</td><td class="lineno" valign="top"></td></tr> |
|---|
| 284 | <tr><td class="lineno" valign="top"></td><td class="left"> MAY relay the credentials from the client request to the next proxy</td><td> </td><td class="right"> MAY relay the credentials from the client request to the next proxy</td><td class="lineno" valign="top"></td></tr> |
|---|
| 285 | <tr><td class="lineno" valign="top"></td><td class="left"> if that is the mechanism by which the proxies cooperatively</td><td> </td><td class="right"> if that is the mechanism by which the proxies cooperatively</td><td class="lineno" valign="top"></td></tr> |
|---|
| 286 | <tr><td class="lineno" valign="top"></td><td class="left"> authenticate a given request.</td><td> </td><td class="right"> authenticate a given request.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 287 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 288 | <tr><td class="lineno" valign="top"></td><td class="left">4.4. WWW-Authenticate</td><td> </td><td class="right">4.4. WWW-Authenticate</td><td class="lineno" valign="top"></td></tr> |
|---|
| 289 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 290 | <tr><td class="lineno" valign="top"></td><td class="left"> The WWW-Authenticate response-header field MUST be included in 401</td><td> </td><td class="right"> The WWW-Authenticate response-header field MUST be included in 401</td><td class="lineno" valign="top"></td></tr> |
|---|
| 291 | <tr><td class="lineno" valign="top"></td><td class="left"> (Unauthorized) response messages. The field value consists of at</td><td> </td><td class="right"> (Unauthorized) response messages. The field value consists of at</td><td class="lineno" valign="top"></td></tr> |
|---|
| 292 | <tr><td class="lineno" valign="top"></td><td class="left"> least one challenge that indicates the authentication scheme(s) and</td><td> </td><td class="right"> least one challenge that indicates the authentication scheme(s) and</td><td class="lineno" valign="top"></td></tr> |
|---|
| 293 | <tr><td class="lineno" valign="top"></td><td class="left"> parameters applicable to the Request-URI.</td><td> </td><td class="right"> parameters applicable to the Request-URI.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 294 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 295 | <tr><td><a name="diff0022" /></td></tr> |
|---|
| 296 | <tr><td class="lineno" valign="top"></td><td class="lblock"> WWW-Authenticate <span class="delete">= "WWW-Authenticate" ":" 1#challenge</span></td><td> </td><td class="rblock"> WWW-Authenticate <span class="insert"> = "WWW-Authenticate" ":" OWS WWW-Authenticate-v</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 297 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> WWW-Authenticate-v = 1#challenge</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 298 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 299 | <tr><td class="lineno" valign="top"></td><td class="left"> The HTTP access authentication process is described in "HTTP</td><td> </td><td class="right"> The HTTP access authentication process is described in "HTTP</td><td class="lineno" valign="top"></td></tr> |
|---|
| 300 | <tr><td class="lineno" valign="top"></td><td class="left"> Authentication: Basic and Digest Access Authentication" [RFC2617].</td><td> </td><td class="right"> Authentication: Basic and Digest Access Authentication" [RFC2617].</td><td class="lineno" valign="top"></td></tr> |
|---|
| 301 | <tr><td class="lineno" valign="top"></td><td class="left"> User agents are advised to take special care in parsing the WWW-</td><td> </td><td class="right"> User agents are advised to take special care in parsing the WWW-</td><td class="lineno" valign="top"></td></tr> |
|---|
| 302 | <tr><td class="lineno" valign="top"></td><td class="left"> Authenticate field value as it might contain more than one challenge,</td><td> </td><td class="right"> Authenticate field value as it might contain more than one challenge,</td><td class="lineno" valign="top"></td></tr> |
|---|
| 303 | <tr><td class="lineno" valign="top"></td><td class="left"> or if more than one WWW-Authenticate header field is provided, the</td><td> </td><td class="right"> or if more than one WWW-Authenticate header field is provided, the</td><td class="lineno" valign="top"></td></tr> |
|---|
| 304 | <tr><td class="lineno" valign="top"></td><td class="left"> contents of a challenge itself can contain a comma-separated list of</td><td> </td><td class="right"> contents of a challenge itself can contain a comma-separated list of</td><td class="lineno" valign="top"></td></tr> |
|---|
| 305 | <tr><td class="lineno" valign="top"></td><td class="left"> authentication parameters.</td><td> </td><td class="right"> authentication parameters.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 306 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 307 | <tr><td class="lineno" valign="top"></td><td class="left">5. IANA Considerations</td><td> </td><td class="right">5. IANA Considerations</td><td class="lineno" valign="top"></td></tr> |
|---|
| 308 | <tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr> |
|---|
| 309 | <tr bgcolor="gray" ><td></td><th><a name="part-l6" /><small>skipping to change at</small><em> page 9, line 16</em></th><th> </th><th><a name="part-r6" /><small>skipping to change at</small><em> page 9, line 20</em></th><td></td></tr> |
|---|
| 310 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 311 | <tr><td class="lineno" valign="top"></td><td class="left"> [[anchor2: TBD.]]</td><td> </td><td class="right"> [[anchor2: TBD.]]</td><td class="lineno" valign="top"></td></tr> |
|---|
| 312 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 313 | <tr><td class="lineno" valign="top"></td><td class="left">8. References</td><td> </td><td class="right">8. References</td><td class="lineno" valign="top"></td></tr> |
|---|
| 314 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 315 | <tr><td class="lineno" valign="top"></td><td class="left">8.1. Normative References</td><td> </td><td class="right">8.1. Normative References</td><td class="lineno" valign="top"></td></tr> |
|---|
| 316 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 317 | <tr><td class="lineno" valign="top"></td><td class="left"> [Part1] Fielding, R., Ed., Gettys, J., Mogul, J., Frystyk, H.,</td><td> </td><td class="right"> [Part1] Fielding, R., Ed., Gettys, J., Mogul, J., Frystyk, H.,</td><td class="lineno" valign="top"></td></tr> |
|---|
| 318 | <tr><td class="lineno" valign="top"></td><td class="left"> Masinter, L., Leach, P., Berners-Lee, T., Lafon, Y., Ed.,</td><td> </td><td class="right"> Masinter, L., Leach, P., Berners-Lee, T., Lafon, Y., Ed.,</td><td class="lineno" valign="top"></td></tr> |
|---|
| 319 | <tr><td class="lineno" valign="top"></td><td class="left"> and J. Reschke, Ed., "HTTP/1.1, part 1: URIs, Connections,</td><td> </td><td class="right"> and J. Reschke, Ed., "HTTP/1.1, part 1: URIs, Connections,</td><td class="lineno" valign="top"></td></tr> |
|---|
| 320 | <tr><td><a name="diff0023" /></td></tr> |
|---|
| 321 | <tr><td class="lineno" valign="top"></td><td class="lblock"> and Message Parsing", draft-ietf-httpbis-p1-messaging-0<span class="delete">4</span></td><td> </td><td class="rblock"> and Message Parsing", draft-ietf-httpbis-p1-messaging-0<span class="insert">5</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 322 | <tr><td class="lineno" valign="top"></td><td class="lblock"> (work in progress), <span class="delete">August</span> 2008.</td><td> </td><td class="rblock"> (work in progress), <span class="insert">November</span> 2008.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 323 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 324 | <tr><td class="lineno" valign="top"></td><td class="left"> [Part6] Fielding, R., Ed., Gettys, J., Mogul, J., Frystyk, H.,</td><td> </td><td class="right"> [Part6] Fielding, R., Ed., Gettys, J., Mogul, J., Frystyk, H.,</td><td class="lineno" valign="top"></td></tr> |
|---|
| 325 | <tr><td class="lineno" valign="top"></td><td class="left"> Masinter, L., Leach, P., Berners-Lee, T., Lafon, Y., Ed.,</td><td> </td><td class="right"> Masinter, L., Leach, P., Berners-Lee, T., Lafon, Y., Ed.,</td><td class="lineno" valign="top"></td></tr> |
|---|
| 326 | <tr><td class="lineno" valign="top"></td><td class="left"> and J. Reschke, Ed., "HTTP/1.1, part 6: Caching",</td><td> </td><td class="right"> and J. Reschke, Ed., "HTTP/1.1, part 6: Caching",</td><td class="lineno" valign="top"></td></tr> |
|---|
| 327 | <tr><td><a name="diff0024" /></td></tr> |
|---|
| 328 | <tr><td class="lineno" valign="top"></td><td class="lblock"> draft-ietf-httpbis-p6-cache-0<span class="delete">4</span> (work in progress),</td><td> </td><td class="rblock"> draft-ietf-httpbis-p6-cache-0<span class="insert">5</span> (work in progress),</td><td class="lineno" valign="top"></td></tr> |
|---|
| 329 | <tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">August</span> 2008.</td><td> </td><td class="rblock"> <span class="insert">November</span> 2008.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 330 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 331 | <tr><td class="lineno" valign="top"></td><td class="left"> [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate</td><td> </td><td class="right"> [RFC2119] Bradner, S., "Key words for use in RFCs to Indicate</td><td class="lineno" valign="top"></td></tr> |
|---|
| 332 | <tr><td class="lineno" valign="top"></td><td class="left"> Requirement Levels", BCP 14, RFC 2119, March 1997.</td><td> </td><td class="right"> Requirement Levels", BCP 14, RFC 2119, March 1997.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 333 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 334 | <tr><td class="lineno" valign="top"></td><td class="left"> [RFC2617] Franks, J., Hallam-Baker, P., Hostetler, J., Lawrence, S.,</td><td> </td><td class="right"> [RFC2617] Franks, J., Hallam-Baker, P., Hostetler, J., Lawrence, S.,</td><td class="lineno" valign="top"></td></tr> |
|---|
| 335 | <tr><td class="lineno" valign="top"></td><td class="left"> Leach, P., Luotonen, A., and L. Stewart, "HTTP</td><td> </td><td class="right"> Leach, P., Luotonen, A., and L. Stewart, "HTTP</td><td class="lineno" valign="top"></td></tr> |
|---|
| 336 | <tr><td class="lineno" valign="top"></td><td class="left"> Authentication: Basic and Digest Access Authentication",</td><td> </td><td class="right"> Authentication: Basic and Digest Access Authentication",</td><td class="lineno" valign="top"></td></tr> |
|---|
| 337 | <tr><td class="lineno" valign="top"></td><td class="left"> RFC 2617, June 1999.</td><td> </td><td class="right"> RFC 2617, June 1999.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 338 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 339 | <tr><td class="lineno" valign="top"></td><td class="left">8.2. Informative References</td><td> </td><td class="right">8.2. Informative References</td><td class="lineno" valign="top"></td></tr> |
|---|
| 340 | <tr><td class="lineno"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno"></td></tr> |
|---|
| 341 | <tr bgcolor="gray" ><td></td><th><a name="part-l7" /><small>skipping to change at</small><em> page 10, line 13</em></th><th> </th><th><a name="part-r7" /><small>skipping to change at</small><em> page 10, line 19</em></th><td></td></tr> |
|---|
| 342 | <tr><td class="lineno" valign="top"></td><td class="left">Appendix B. Change Log (to be removed by RFC Editor before publication)</td><td> </td><td class="right">Appendix B. Change Log (to be removed by RFC Editor before publication)</td><td class="lineno" valign="top"></td></tr> |
|---|
| 343 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 344 | <tr><td class="lineno" valign="top"></td><td class="left">B.1. Since RFC2616</td><td> </td><td class="right">B.1. Since RFC2616</td><td class="lineno" valign="top"></td></tr> |
|---|
| 345 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 346 | <tr><td class="lineno" valign="top"></td><td class="left"> Extracted relevant partitions from [RFC2616].</td><td> </td><td class="right"> Extracted relevant partitions from [RFC2616].</td><td class="lineno" valign="top"></td></tr> |
|---|
| 347 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 348 | <tr><td class="lineno" valign="top"></td><td class="left">B.2. Since draft-ietf-httpbis-p7-auth-00</td><td> </td><td class="right">B.2. Since draft-ietf-httpbis-p7-auth-00</td><td class="lineno" valign="top"></td></tr> |
|---|
| 349 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 350 | <tr><td class="lineno" valign="top"></td><td class="left"> Closed issues:</td><td> </td><td class="right"> Closed issues:</td><td class="lineno" valign="top"></td></tr> |
|---|
| 351 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 352 | <tr><td><a name="diff0025" /></td></tr> |
|---|
| 353 | <tr><td class="lineno" valign="top"></td><td class="lblock"> o <http://<span class="delete">www3.tools.ietf.org/wg/httpbis/trac/ticket/35>: "Normative</span></td><td> </td><td class="rblock"> o <http://<span class="insert">tools.ietf.org/wg/httpbis/trac/ticket/35>: "Normative and</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 354 | <tr><td class="lineno" valign="top"></td><td class="lblock"> <span class="delete">and </span>Informative references"</td><td> </td><td class="rblock"> Informative references"</td><td class="lineno" valign="top"></td></tr> |
|---|
| 355 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 356 | <tr><td class="lineno" valign="top"></td><td class="left">B.3. Since draft-ietf-httpbis-p7-auth-01</td><td> </td><td class="right">B.3. Since draft-ietf-httpbis-p7-auth-01</td><td class="lineno" valign="top"></td></tr> |
|---|
| 357 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 358 | <tr><td class="lineno" valign="top"></td><td class="left"> Ongoing work on ABNF conversion</td><td> </td><td class="right"> Ongoing work on ABNF conversion</td><td class="lineno" valign="top"></td></tr> |
|---|
| 359 | <tr><td><a name="diff0026" /></td></tr> |
|---|
| 360 | <tr><td class="lineno" valign="top"></td><td class="lblock"> (<http://<span class="delete">www3.</span>tools.ietf.org/wg/httpbis/trac/ticket/36>):</td><td> </td><td class="rblock"> (<http://tools.ietf.org/wg/httpbis/trac/ticket/36>):</td><td class="lineno" valign="top"></td></tr> |
|---|
| 361 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 362 | <tr><td class="lineno" valign="top"></td><td class="left"> o Explicitly import BNF rules for "challenge" and "credentials" from</td><td> </td><td class="right"> o Explicitly import BNF rules for "challenge" and "credentials" from</td><td class="lineno" valign="top"></td></tr> |
|---|
| 363 | <tr><td class="lineno" valign="top"></td><td class="left"> RFC2617.</td><td> </td><td class="right"> RFC2617.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 364 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 365 | <tr><td class="lineno" valign="top"></td><td class="left"> o Add explicit references to BNF syntax and rules imported from</td><td> </td><td class="right"> o Add explicit references to BNF syntax and rules imported from</td><td class="lineno" valign="top"></td></tr> |
|---|
| 366 | <tr><td class="lineno" valign="top"></td><td class="left"> other parts of the specification.</td><td> </td><td class="right"> other parts of the specification.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 367 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 368 | <tr><td class="lineno" valign="top"></td><td class="left">B.4. Since draft-ietf-httpbis-p7-auth-02</td><td> </td><td class="right">B.4. Since draft-ietf-httpbis-p7-auth-02</td><td class="lineno" valign="top"></td></tr> |
|---|
| 369 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 370 | <tr><td class="lineno" valign="top"></td><td class="left"> Ongoing work on IANA Message Header Registration</td><td> </td><td class="right"> Ongoing work on IANA Message Header Registration</td><td class="lineno" valign="top"></td></tr> |
|---|
| 371 | <tr><td><a name="diff0027" /></td></tr> |
|---|
| 372 | <tr><td class="lineno" valign="top"></td><td class="lblock"> (<http://<span class="delete">www3.</span>tools.ietf.org/wg/httpbis/trac/ticket/40>):</td><td> </td><td class="rblock"> (<http://tools.ietf.org/wg/httpbis/trac/ticket/40>):</td><td class="lineno" valign="top"></td></tr> |
|---|
| 373 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 374 | <tr><td class="lineno" valign="top"></td><td class="left"> o Reference RFC 3984, and update header registrations for headers</td><td> </td><td class="right"> o Reference RFC 3984, and update header registrations for headers</td><td class="lineno" valign="top"></td></tr> |
|---|
| 375 | <tr><td class="lineno" valign="top"></td><td class="left"> defined in this document.</td><td> </td><td class="right"> defined in this document.</td><td class="lineno" valign="top"></td></tr> |
|---|
| 376 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 377 | <tr><td class="lineno" valign="top"></td><td class="left">B.5. Since draft-ietf-httpbis-p7-auth-03</td><td> </td><td class="right">B.5. Since draft-ietf-httpbis-p7-auth-03</td><td class="lineno" valign="top"></td></tr> |
|---|
| 378 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 379 | <tr><td><a name="diff0028" /></td></tr> |
|---|
| 380 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert">B.6. Since draft-ietf-httpbis-p7-auth-04</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 381 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> </span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 382 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Ongoing work on ABNF conversion</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 383 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> (<http://tools.ietf.org/wg/httpbis/trac/ticket/36>):</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 384 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> </span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 385 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> o Use "/" instead of "|" for alternatives.</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 386 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> </span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 387 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> o Introduce new ABNF rules for "bad" whitespace ("BWS"), optional</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 388 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> whitespace ("OWS") and required whitespace ("RWS").</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 389 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> </span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 390 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> o Rewrite ABNFs to spell out whitespace rules, factor out header</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 391 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> value format definitions.</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 392 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> </span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 393 | <tr><td class="lineno" valign="top"></td><td class="left">Index</td><td> </td><td class="right">Index</td><td class="lineno" valign="top"></td></tr> |
|---|
| 394 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 395 | <tr><td class="lineno" valign="top"></td><td class="left"> 4</td><td> </td><td class="right"> 4</td><td class="lineno" valign="top"></td></tr> |
|---|
| 396 | <tr><td class="lineno" valign="top"></td><td class="left"> 401 Unauthorized (status code) 5</td><td> </td><td class="right"> 401 Unauthorized (status code) 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 397 | <tr><td class="lineno" valign="top"></td><td class="left"> 407 Proxy Authentication Required (status code) 5</td><td> </td><td class="right"> 407 Proxy Authentication Required (status code) 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 398 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 399 | <tr><td class="lineno" valign="top"></td><td class="left"> A</td><td> </td><td class="right"> A</td><td class="lineno" valign="top"></td></tr> |
|---|
| 400 | <tr><td class="lineno" valign="top"></td><td class="left"> Authorization header 5</td><td> </td><td class="right"> Authorization header 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 401 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 402 | <tr><td class="lineno" valign="top"></td><td class="left"> G</td><td> </td><td class="right"> G</td><td class="lineno" valign="top"></td></tr> |
|---|
| 403 | <tr><td class="lineno" valign="top"></td><td class="left"> Grammar</td><td> </td><td class="right"> Grammar</td><td class="lineno" valign="top"></td></tr> |
|---|
| 404 | <tr><td class="lineno" valign="top"></td><td class="left"> Authorization 5</td><td> </td><td class="right"> Authorization 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 405 | <tr><td><a name="diff0029" /></td></tr> |
|---|
| 406 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Authorization-v 5</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 407 | <tr><td class="lineno" valign="top"></td><td class="left"> challenge 4</td><td> </td><td class="right"> challenge 4</td><td class="lineno" valign="top"></td></tr> |
|---|
| 408 | <tr><td class="lineno" valign="top"></td><td class="left"> credentials 4</td><td> </td><td class="right"> credentials 4</td><td class="lineno" valign="top"></td></tr> |
|---|
| 409 | <tr><td class="lineno" valign="top"></td><td class="left"> Proxy-Authenticate 6</td><td> </td><td class="right"> Proxy-Authenticate 6</td><td class="lineno" valign="top"></td></tr> |
|---|
| 410 | <tr><td><a name="diff0030" /></td></tr> |
|---|
| 411 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Proxy-Authenticate-v 6</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 412 | <tr><td class="lineno" valign="top"></td><td class="left"> Proxy-Authorization 7</td><td> </td><td class="right"> Proxy-Authorization 7</td><td class="lineno" valign="top"></td></tr> |
|---|
| 413 | <tr><td><a name="diff0031" /></td></tr> |
|---|
| 414 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> Proxy-Authorization-v 7</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 415 | <tr><td class="lineno" valign="top"></td><td class="left"> WWW-Authenticate 7</td><td> </td><td class="right"> WWW-Authenticate 7</td><td class="lineno" valign="top"></td></tr> |
|---|
| 416 | <tr><td><a name="diff0032" /></td></tr> |
|---|
| 417 | <tr><td class="lineno" valign="top"></td><td class="lblock"></td><td> </td><td class="rblock"><span class="insert"> WWW-Authenticate-v 7</span></td><td class="lineno" valign="top"></td></tr> |
|---|
| 418 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 419 | <tr><td class="lineno" valign="top"></td><td class="left"> H</td><td> </td><td class="right"> H</td><td class="lineno" valign="top"></td></tr> |
|---|
| 420 | <tr><td class="lineno" valign="top"></td><td class="left"> Headers</td><td> </td><td class="right"> Headers</td><td class="lineno" valign="top"></td></tr> |
|---|
| 421 | <tr><td class="lineno" valign="top"></td><td class="left"> Authorization 5</td><td> </td><td class="right"> Authorization 5</td><td class="lineno" valign="top"></td></tr> |
|---|
| 422 | <tr><td class="lineno" valign="top"></td><td class="left"> Proxy-Authenticate 6</td><td> </td><td class="right"> Proxy-Authenticate 6</td><td class="lineno" valign="top"></td></tr> |
|---|
| 423 | <tr><td class="lineno" valign="top"></td><td class="left"> Proxy-Authorization 7</td><td> </td><td class="right"> Proxy-Authorization 7</td><td class="lineno" valign="top"></td></tr> |
|---|
| 424 | <tr><td class="lineno" valign="top"></td><td class="left"> WWW-Authenticate 7</td><td> </td><td class="right"> WWW-Authenticate 7</td><td class="lineno" valign="top"></td></tr> |
|---|
| 425 | <tr><td class="lineno" valign="top"></td><td class="left"></td><td> </td><td class="right"></td><td class="lineno" valign="top"></td></tr> |
|---|
| 426 | <tr><td class="lineno" valign="top"></td><td class="left"> P</td><td> </td><td class="right"> P</td><td class="lineno" valign="top"></td></tr> |
|---|
| 427 | <tr><td class="lineno" valign="top"></td><td class="left"> Proxy-Authenticate header 6</td><td> </td><td class="right"> Proxy-Authenticate header 6</td><td class="lineno" valign="top"></td></tr> |
|---|
| 428 | |
|---|
| 429 | <tr><td></td><td class="left"></td><td> </td><td class="right"></td><td></td></tr> |
|---|
| 430 | <tr bgcolor="gray"><th colspan="5" align="center"><a name="end"> End of changes. 32 change blocks. </a></th></tr> |
|---|
| 431 | <tr class="stats"><td></td><th><i>33 lines changed or deleted</i></th><th><i> </i></th><th><i>59 lines changed or added</i></th><td></td></tr> |
|---|
| 432 | <tr><td colspan="5" align="center" class="small"><br/>This html diff was produced by rfcdiff 1.34. The latest version is available from <a href="http://www.tools.ietf.org/tools/rfcdiff/" >http://tools.ietf.org/tools/rfcdiff/</a> </td></tr> |
|---|
| 433 | </table> |
|---|
| 434 | </body> |
|---|
| 435 | </html> |
|---|
![(please configure the [header_logo] section in trac.ini)](https://www.ietf.org/images/ietflogotrans.gif)
