On Thu, 2005-06-16 at 11:54 +0200, Daniel Cuevas wrote: > Hi, > I would like to clarify if the syntax of the challenge method (Digest) in > the WWW-Authenticate header of a 401 response should be case sensitive or > not. > > In other words, the following messages sent by a SIP Proxy to a UA > > SIP/2.0 401 Unauthorized > WWW-Authenticate: Digest realm="domain.es" > > And > > SIP/2.0 401 Unauthorized > WWW-Authenticate: digest realm="domain.es" > > > Should be equally valid, or the word Digest should be case sensitive. In > this case, what would be the right format?
>From RFC 2617: 1.2 Access Authentication Framework HTTP provides a simple challenge-response authentication mechanism that MAY be used by a server to challenge a client request and by a client to provide authentication information. It uses an extensible, case-insensitive token to identify the authentication scheme, The 'digest' token may be any case. 'dIgEsT' should work. -- Scott Lawrence, Consulting Engineer Pingtel Corp. http://www.pingtel.com/ +1.781.938.5306 x162 or sip:[EMAIL PROTECTED] _______________________________________________ Sip-implementors mailing list [email protected] http://lists.cs.columbia.edu/mailman/listinfo/sip-implementors
