[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Security Considerations


On 8/3/06, Sam Hartman <hartmans-ietf@xxxxxxx> wrote:

The conclusion of those on the call is that in order to meet IETF
interoperability requirements APP must normatively require a mandatory
to implement security mechanism for HTTP authentication.


To put this in perspective this is the only bit of useless
bureaucratic boilerplate that will be in the spec. Yes, there
are other bits of bureaucratic boilerplate in the spec but I think they
are useful and make the spec better. And yes, I see almost
complete unanimity that this will be universally ignored in
practice. Let's just hold our noses, add it to the spec, and move on.

  -joe

--
Joe Gregorio        http://bitworking.org