Changeset 1533 for draft-ietf-httpbis/latest/p7-auth.html

Timestamp:

08/02/12 08:19:08 (11 years ago)

Author:

julian.reschke@…

Message:

Note the ambiguity in the Proxy-A and WWW-A ABNF (see #342)

File:

• draft-ietf-httpbis/latest/p7-auth.html (modified) (11 diffs)

draft-ietf-httpbis/latest/p7-auth.html

@@ -460 +460 @@
   } 
   @bottom-center {
-       content: "Expires August 10, 2012"; 
+       content: "Expires August 11, 2012"; 
   } 
   @bottom-right {
@@ -506 +506 @@
       <meta name="dct.creator" content="Reschke, J. F.">
       <meta name="dct.identifier" content="urn:ietf:id:draft-ietf-httpbis-p7-auth-latest">
-      <meta name="dct.issued" scheme="ISO8601" content="2012-02-07">
+      <meta name="dct.issued" scheme="ISO8601" content="2012-02-08">
       <meta name="dct.replaces" content="urn:ietf:rfc:2616">
       <meta name="dct.abstract" content="The Hypertext Transfer Protocol (HTTP) is an application-level protocol for distributed, collaborative, hypermedia information systems. HTTP has been in use by the World Wide Web global information initiative since 1990. This document is Part 7 of the seven-part specification that defines the protocol referred to as &#34;HTTP/1.1&#34; and, taken together, obsoletes RFC 2616. Part 7 defines the HTTP Authentication framework.">
@@ -537 +537 @@
             </tr>
             <tr>
-               <td class="left">Expires: August 10, 2012</td>
+               <td class="left">Expires: August 11, 2012</td>
                <td class="right">HP</td>
             </tr>
@@ -590 +590 @@
             <tr>
                <td class="left"></td>
-               <td class="right">February 7, 2012</td>
+               <td class="right">February 8, 2012</td>
             </tr>
          </tbody>
@@ -618 +618 @@
          in progress”.
       </p>
-      <p>This Internet-Draft will expire on August 10, 2012.</p>
+      <p>This Internet-Draft will expire on August 11, 2012.</p>
       <h1><a id="rfc.copyrightnotice" href="#rfc.copyrightnotice">Copyright Notice</a></h1>
       <p>Copyright © 2012 IETF Trust and the persons identified as the document authors. All rights reserved.</p>
@@ -933 +933 @@
          header field.
       </p>
+      <p id="rfc.section.4.2.p.4">Note that the parsing considerations for WWW-Authenticate apply to this header field as well; see <a href="#header.www-authenticate" id="rfc.xref.header.www-authenticate.2" title="WWW-Authenticate">Section&nbsp;4.4</a> for details.
+      </p>
       <div id="rfc.iref.p.3"></div>
       <div id="rfc.iref.h.3"></div>
@@ -966 +968 @@
          "type" and "title", and another one for the "Basic" scheme with a realm value of "simple".
       </p>
+      <div class="note" id="rfc.section.4.4.p.6"> 
+         <p> <b>Note:</b> The challenge grammar production uses the list syntax as well. Therefore, a sequence of comma, whitespace, and comma can be
+            considered both as applying to the preceding challenge, or to be an empty entry in the list of challenges. In practice, this
+            ambiguity does not affect the semantics of the header field value and thus is harmless.
+         </p> 
+      </div>
       <h1 id="rfc.section.5"><a href="#rfc.section.5">5.</a>&nbsp;<a id="IANA.considerations" href="#IANA.considerations">IANA Considerations</a></h1>
       <h2 id="rfc.section.5.1"><a href="#rfc.section.5.1">5.1</a>&nbsp;<a id="authentication.scheme.registration" href="#authentication.scheme.registration">Authenticaton Scheme Registry</a></h2>
@@ -1041 +1049 @@
                   <td class="left">http</td>
                   <td class="left">standard</td>
-                  <td class="left"> <a href="#header.www-authenticate" id="rfc.xref.header.www-authenticate.2" title="WWW-Authenticate">Section&nbsp;4.4</a> 
+                  <td class="left"> <a href="#header.www-authenticate" id="rfc.xref.header.www-authenticate.3" title="WWW-Authenticate">Section&nbsp;4.4</a> 
                   </td>
                </tr>
@@ -1318 +1326 @@
       </ul>
       <h2 id="rfc.section.C.20"><a href="#rfc.section.C.20">C.20</a>&nbsp;<a id="changes.since.18" href="#changes.since.18">Since draft-ietf-httpbis-p7-auth-18</a></h2>
-      <p id="rfc.section.C.20.p.1">None yet.</p>
+      <p id="rfc.section.C.20.p.1">Closed issues: </p>
+      <ul>
+         <li> &lt;<a href="http://tools.ietf.org/wg/httpbis/trac/ticket/342">http://tools.ietf.org/wg/httpbis/trac/ticket/342</a>&gt;: "WWW-Authenticate ABNF slightly ambiguous"
+         </li>
+      </ul>
       <h1 id="rfc.index"><a href="#rfc.index">Index</a></h1>
       <p class="noprint"><a href="#rfc.index.4">4</a> <a href="#rfc.index.A">A</a> <a href="#rfc.index.B">B</a> <a href="#rfc.index.C">C</a> <a href="#rfc.index.G">G</a> <a href="#rfc.index.H">H</a> <a href="#rfc.index.P">P</a> <a href="#rfc.index.R">R</a> <a href="#rfc.index.S">S</a> <a href="#rfc.index.W">W</a> 
@@ -1366 +1378 @@
                         <li>Proxy-Authenticate&nbsp;&nbsp;<a href="#rfc.xref.header.proxy-authenticate.1">3.2</a>, <a href="#rfc.iref.h.2"><b>4.2</b></a>, <a href="#rfc.xref.header.proxy-authenticate.2">5.3</a></li>
                         <li>Proxy-Authorization&nbsp;&nbsp;<a href="#rfc.xref.header.proxy-authorization.1">3.2</a>, <a href="#rfc.iref.h.3"><b>4.3</b></a>, <a href="#rfc.xref.header.proxy-authorization.2">5.3</a></li>
-                        <li>WWW-Authenticate&nbsp;&nbsp;<a href="#rfc.xref.header.www-authenticate.1">3.1</a>, <a href="#rfc.iref.h.4"><b>4.4</b></a>, <a href="#rfc.xref.header.www-authenticate.2">5.3</a></li>
+                        <li>WWW-Authenticate&nbsp;&nbsp;<a href="#rfc.xref.header.www-authenticate.1">3.1</a>, <a href="#rfc.xref.header.www-authenticate.2">4.2</a>, <a href="#rfc.iref.h.4"><b>4.4</b></a>, <a href="#rfc.xref.header.www-authenticate.3">5.3</a></li>
                      </ul>
                   </li>
@@ -1422 +1434 @@
             </li>
             <li><a id="rfc.index.W" href="#rfc.index.W"><b>W</b></a><ul>
-                  <li>WWW-Authenticate header field&nbsp;&nbsp;<a href="#rfc.xref.header.www-authenticate.1">3.1</a>, <a href="#rfc.iref.w.1"><b>4.4</b></a>, <a href="#rfc.xref.header.www-authenticate.2">5.3</a></li>
+                  <li>WWW-Authenticate header field&nbsp;&nbsp;<a href="#rfc.xref.header.www-authenticate.1">3.1</a>, <a href="#rfc.xref.header.www-authenticate.2">4.2</a>, <a href="#rfc.iref.w.1"><b>4.4</b></a>, <a href="#rfc.xref.header.www-authenticate.3">5.3</a></li>
                </ul>
             </li>