On Wednesday, August 11 2004, "David Stuart" wrote to "[EMAIL PROTECTED], SIP 
Implementors Mailing List" saying:

> A number of people here have suggested that a 403 response means "I know 
> who you are, but you are not allowed to do that"
> [...]
> 
> But, if we interpret the 403 to mean what you have suggested, "Your 
> credentials are bad, stop bugging me".
> [...]

Often, a server sending a 403 might not even have *checked* the
credentials.  "I don't care if you are who you claim to be; the person you
claim to be isn't allowed to do that."  (Or, "no one is allowed to do
that.")  I don't think a 403 makes any statement at all about the validity
of the credentials in the request.

-- 
Jonathan Lennox
[EMAIL PROTECTED]
_______________________________________________
Sip-implementors mailing list
[EMAIL PROTECTED]
http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors

Reply via email to