From mboxrd@z Thu Jan 1 00:00:00 1970 Path: news.gmane.org!not-for-mail From: Magnus Henoch Newsgroups: gmane.emacs.devel Subject: Re: [gotoh@taiyo.co.jp: url-http-handle-authentication does not handle multiple WWW-Authenticate: lines.] Date: Wed, 08 Nov 2006 21:35:33 +0100 Message-ID: <87u019d6cq.fsf@freemail.hu> References: <454A7033.8030109@f2s.com> NNTP-Posting-Host: main.gmane.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii X-Trace: sea.gmane.org 1163018198 23605 80.91.229.2 (8 Nov 2006 20:36:38 GMT) X-Complaints-To: usenet@sea.gmane.org NNTP-Posting-Date: Wed, 8 Nov 2006 20:36:38 +0000 (UTC) Original-X-From: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Wed Nov 08 21:36:36 2006 Return-path: Envelope-to: ged-emacs-devel@m.gmane.org Original-Received: from lists.gnu.org ([199.232.76.165]) by ciao.gmane.org with esmtp (Exim 4.43) id 1Ghu9r-0003hs-S4 for ged-emacs-devel@m.gmane.org; Wed, 08 Nov 2006 21:36:28 +0100 Original-Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Ghu9r-0001CP-Cd for ged-emacs-devel@m.gmane.org; Wed, 08 Nov 2006 15:36:27 -0500 Original-Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.43) id 1Ghu9S-0000tv-QQ for emacs-devel@gnu.org; Wed, 08 Nov 2006 15:36:02 -0500 Original-Received: from exim by lists.gnu.org with spam-scanned (Exim 4.43) id 1Ghu9R-0000qu-1q for emacs-devel@gnu.org; Wed, 08 Nov 2006 15:36:02 -0500 Original-Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.43) id 1Ghu9Q-0000qc-Tn for emacs-devel@gnu.org; Wed, 08 Nov 2006 15:36:00 -0500 Original-Received: from [80.91.229.2] (helo=ciao.gmane.org) by monty-python.gnu.org with esmtps (TLS-1.0:RSA_AES_256_CBC_SHA:32) (Exim 4.52) id 1Ghu9Q-0002Dl-Rp for emacs-devel@gnu.org; Wed, 08 Nov 2006 15:36:01 -0500 Original-Received: from list by ciao.gmane.org with local (Exim 4.43) id 1Ghu9K-0003be-Ov for emacs-devel@gnu.org; Wed, 08 Nov 2006 21:35:54 +0100 Original-Received: from etthundrat.olf.sgsnet.se ([193.11.222.85]) by main.gmane.org with esmtp (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 08 Nov 2006 21:35:54 +0100 Original-Received: from mange by etthundrat.olf.sgsnet.se with local (Gmexim 0.1 (Debian)) id 1AlnuQ-0007hv-00 for ; Wed, 08 Nov 2006 21:35:54 +0100 X-Injected-Via-Gmane: http://gmane.org/ Mail-Followup-To: emacs-devel@gnu.org Original-To: emacs-devel@gnu.org Original-Lines: 12 Original-X-Complaints-To: usenet@sea.gmane.org X-Gmane-NNTP-Posting-Host: etthundrat.olf.sgsnet.se Mail-Copies-To: never Jabber-Id: legoscia@jabber.cd.chalmers.se User-Agent: Gnus/5.110006 (No Gnus v0.6) Emacs/22.0.90 (berkeley-unix) Cancel-Lock: sha1:FPwvDJ9/vgW59q6tkyQ0AJZWLdY= X-BeenThere: emacs-devel@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: "Emacs development discussions." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Original-Sender: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Errors-To: emacs-devel-bounces+ged-emacs-devel=m.gmane.org@gnu.org Xref: news.gmane.org gmane.emacs.devel:61963 Archived-At: Jason Rumney writes: > It's better than the current situation of giving up if the auth method > in the first header is not supported, but still not correct according > to RFC-2617, which says that we MUST always select the most secure > authentication method supported when offered multiple WWW-Authenticate > headers. Indeed. I just changed the code to use the strongest method. Thanks for noticing! Magnus