Sam Hartman wrote:
The conclusion of those on the call is that in order to meet IETF interoperability requirements APP must normatively require a mandatory to implement security mechanism for HTTP authentication.
Operationally this isn't any better than Robert's suggested text. cheers Bill