RE: Re: HTTP Authentication by Username Embedded in URL

Okay, I solved the problem on the server side, by putting a "Satisfy Any" before all authentication stuff. Real anonymous login is now possible.

And for the scheme hijacking in this thread. :-) That's not very fruitful IMHO. I can also comment that for example on the HTTPbis page there is already an error. It states this:

This section defines the syntax and semantics for identifiers using the http or https URI schemes.

  http-URI = "http:" "//" authority path-abempty [ "?" query ]

But the https URI scheme starts of course not with "http:" but with "https:". I think usability and security is more important than a nice analytic description. You will make errors in it anyway, and who reads it? :-)

------------------------------------------------------
http://subversion.tigris.org/ds/viewMessage.do?dsForumId=462&dsMessageId=1138315
Received on 2009-02-11 11:35:08 CET