RFC2617 specifically allows http authentication with no username and or
no password.

ie the following are valid:

user "" password "joe"
user "joe" password ""
and
user "" password ""

Rob

Reply via email to