[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: digest-md5 realm
No realm in digest-response means to use the empty string in the calculation
of the hash.
If the server does not hold the empty string realm, then it MAY send a list
of the realms it does hold. However, the empty string realm is no different
in this respect than any other realm -- if the server does not send a list
of realms, then the client could choose a realm that the server doesn't
hold, in which case the authentication will just fail.
Paul