On Mon, Dec 7, 2009 at 8:23 PM, Dan Winship <d...@gnome.org> wrote: > mmm... yes, it probably should be > > if (!(qop & SOUP_AUTH_DIGEST_QOP_AUTH))
Tried it, but then the openid login box just keeps popping up again and again. > could you run surf with WEBKIT_DEBUG=Network and confirm that the Digest > WWW-Authenticate header sent from identi.ca has qop="auth,auth-int" ? Yes. The line starts: WWW-Authenticate: Digest qop="auth-int, auth", realm="phpMyID", and goes on with my domains and hashes. It seems to be my openID server that sends it, not identi.ca.
