On 6/7/06, Paul Hoffman <[EMAIL PROTECTED]> wrote:

Wearing my WG co-chair hat, I think the WG does not have consensus on
what to do. Further, it is not clear that we need to do anything
other than be explicit about punting. That is, we don't have to say
all the things we argued about and why.

I propose the following paragraph for the entire contents of section
13; comments are welcome.

All instances of publishing Atom Format entries SHOULD be protected
by authentication to prevent posting or editing by unknown sources.
The type of authentication used is a local decision made by the server
and the client. Because of this, servers and clients are likely to
face different types of authentication schemes.

I have yet to see a single installation that offered mulitple types of
authentication even though RFC 2617 allows it. I think it would be more
helpful if the last two sentences were worded as:

"The type of authentication used is a local decision made by the server.
Because of this, clients are likely to face different types of
authentication schemes."

But I'm not wedded to that wording and if no one else objects I'd be
OK with your wording.

 -joe

--
Joe Gregorio        http://bitworking.org

Reply via email to