-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Mark,

On 9/24/12 1:49 PM, Mark Thomas wrote:
> On 24/09/2012 17:51, Christopher Schultz wrote:
>> I'm curious how you will "check DIGEST first" and then apply 
>> BASIC. Are you expecting some clients to simply send DIGEST 
>> credentials without first contacting the server? I don't think 
>> that's possible.
> 
> RFC2616 allows multiple authentication challenges to be sent so
> both DIGEST and BASIC could be sent in a single response. It would
> then be up to the client how to respond.

Oh, that's an interesting idea.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/

iEYEARECAAYFAlBgqd8ACgkQ9CaO5/Lv0PCgvACeLL3uUyIhTe3AVArHoUgKvjv2
PuUAoI5qC9Htsuf+JeA/4hvNMGkp9/kH
=Egm8
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to