search

netconf-wg / restconf

9 stars 4 forks source link

add something about WWW-Authenticate realms #29

Closed kwatsen closed 8 years ago

kwatsen commented 8 years ago

From Stephen Farrell DISCUSS thread:

My first thought on this is to note that the RESTCONF draft is completely mute on the subject of realms - an omission for sure. As an author on that draft, my inclination is to add a statement along the lines of “MUST use the realm FOO”, which would equate it to NETCONF, where there is no equivalent concept to a realm.

kwatsen commented 8 years ago

Reading https://tools.ietf.org/html/rfc7235, it seems that "realm" is no longer required in general, though both RFC 7616 and RFC 7617 require it. Now I'm thinking that since the fix to #32 is to remove everything regarding authentication schemes, that we no longer need to say anything about realms either. So I'm going to close this issue as DEAD.