Ian Hickson wrote:
challenge = "HTML" [ form ]
form = "form" "=" form-name
form-name = quoted-string
RFC2617 states that "The realm directive (case-insensitive) is required
for all authentication schemes that issue a challenge."
I didn't really understand how the realm would work here, which is why I
didn't include it. Is this a case where we should violate RFC2617? (Note
that we're in a rather unusual case here because the challenge never gets
a reply in the traditional sense.)
Unless there's an ultra-important reason to violate any base
requirements, I would advise against it.
BR, Julian
