[10775] in www-talk@info.cern.ch
Re: Browser authentication
daemon@ATHENA.MIT.EDU (Kevin J. Dyer)
Thu Apr 24 07:57:20 1997
Date: Thu, 24 Apr 1997 07:35:01 -0400
From: kdyer@draper.com (Kevin J. Dyer)
In-Reply-To: grahameg@kestral.com.au "Browser authentication" (Apr 24, 4:39am)
To: grahameg@kestral.com.au, www-talk@w3.org
Reply-To: kdyer@draper.com
Resent-From: www-talk@w3.org
On Apr 24, 4:39am, grahameg@kestral.com.au wrote:
> Subject: Browser authentication
>
>
>
>
>
>
> Is there anyway for a server to clear the authentication field carried in
> the HTTP header?
>
> We wish to time the authentications out, but returning an HTTP 401
> Authorisation failed
[...]
I made a suggestion late last year to add a 416 return code. The short
of it required the UA to cancel all authentications with the current
domain. This would be for both basic and digest authentication. But
that was for 1.1+.
--
=============================================================================
Kevin J. Dyer Draper Laboratory MS 23.
Email: <kdyer@draper.com> 555 Tech. Sq.
Phone: 617-258-4962 Cambridge, MA 02139
FAX: 617-258-2121
-----------------------------------------------------------------------------
"Beware Geeks bearing GIFs" Author Unknown
=============================================================================
