[PEPr] Comment on Authentication::Auth_HTTP_Digest
| From: | PEPr | Date: | Sat, 21 Feb 2004 18:53:35 +0000 |
| Subject: | [PEPr] Comment on Authentication::Auth_HTTP_Digest | ||
| Groups: | php.pear.dev | ||
| Request: | Send a blank email to pear-dev+get-25760@lists.php.net to get a copy of this message | ||
Paul Querna (http://pear.php.net/user/chip) has commented on the proposal for
Authentication::Auth_HTTP_Digest.
Comment:
Few more things :)
if the Force Digest Flag is set, you should never send this:
'WWW-Authenticate: Basic realm="'.$this->basicRealm.'"';
What Browser Clients have you tested your implmentation with? My gut feel based on exerpiences with
mod_auth_digest in apache say that it will not work with Internet Explorer. Mozilla might not work
on Post requests. Konqueror should work properly.
It would be cool if you had a document listing known compatible/incompatible browsers.
Unfortunately the RFC is not always clear and there are several existing implmentations that
don't work with each other.
Thanks for your work on the module, it does look like it will be very usefull.
-Paul
Proposal information:
http://pear.php.net/pepr/pepr-proposal-show.php?id=25
--
Sent by PEPr, the automatic proposal system at http://pear.php.net