Changeset 2457

Timestamp:

31/10/13 15:09:33 (9 years ago)

Author:

julian.reschke@…

Message:

add an example for a realm-related user preference (see #510)

Location:

draft-ietf-httpbis/latest

Files:

• p7-auth.html (modified) (1 diff)
• p7-auth.xml (modified) (1 diff)

draft-ietf-httpbis/latest/p7-auth.html

@@ -707 +707 @@
             <p id="rfc.section.2.2.p.3">The protection space determines the domain over which credentials can be automatically applied. If a prior request has been
                authorized, the user agent <em class="bcp14">MAY</em> reuse the same credentials for all other requests within that protection space for a period of time determined by the authentication
-               scheme, parameters, and/or user preference. Unless specifically allowed by the authentication scheme, a single protection
-               space cannot extend outside the scope of its server.
+               scheme, parameters, and/or user preferences (such as a configurable inactivity timeout). Unless specifically allowed by the
+               authentication scheme, a single protection space cannot extend outside the scope of its server.
             </p>
             <p id="rfc.section.2.2.p.4">For historical reasons, a sender <em class="bcp14">MUST</em> only generate the quoted-string syntax. Recipients might have to support both token and quoted-string syntax for maximum interoperability

draft-ietf-httpbis/latest/p7-auth.xml

@@ -292 +292 @@
    be automatically applied. If a prior request has been authorized, the
    user agent &MAY; reuse the same credentials for all other requests within
-   that protection space for a period of time determined by the
-   authentication scheme, parameters, and/or user preference. Unless
-   specifically allowed by the authentication scheme, a single protection
-   space cannot extend outside the scope of its server.
+   that protection space for a period of time determined by the authentication
+   scheme, parameters, and/or user preferences (such as a configurable
+   inactivity timeout). Unless specifically allowed by the authentication
+   scheme, a single protection space cannot extend outside the scope of its
+   server.
 </t>
 <t>