Re: DIGEST-MD5 on HTTP webserver

Nil Croustillac <[email protected]>
Newsgroups gmane.comp.security.cyrus.sasl
Message-ID <CAEUW1owZQ5fgu+MUL=cDYKigUhMuhahJhJUFDJT_8Vb-GT8+aA@mail.gmail.com>
Hi Phil,

I know that SASL is absolutely not a part of any layer of HTTP, I am using
the Monkey HTTP webserver for that purpose ;)
What I want is to allow my webservice to negotiate the authentication
mechanism with a client browser.

Indeed, I could create my own layer using libcurl but SASL sounded to me as
the right choice to that purpose.
I have found few attempts to standardize HTTP authentication over SASL like
this draft:
 * http://tools.ietf.org/html/draft-nystrom-http-sasl-12

Are you sure that this library won't do the trick ?

Thanks,
Nil.
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.