Re: Digest authentication

furaisanjin wrote:
> The problems of my DVD recorder are
> 1 it doesn't allow extra space characters between '='.

My impression has been that rfc 2617, following rfc 2616's rules, permits
implied linear whitespace in such places. But we can take the spaces out.

> 2 uri needs to have quote

I was sure this was wrong. And it turns out that this is in the errata
(http://www.rfc-editor.org/errata_search.php?rfc=2617)
  'Errata ID: 2600

   Status: Verified
   Type: Technical

   Reported By: Victor S. Osipov
   Date Reported: 2010-11-02
   Verifier Name: Peter Saint-Andre
   Date Verified: 2011-07-14

   Section 3.2.2 says: 

   digest-uri       = "uri" "=" digest-uri-value
   digest-uri-value = request-uri   ; As specified by HTTP/1.1

   It should say:

   digest-uri       = "uri" "=" <"> digest-uri-value <">
   digest-uri-value = request-uri   ; As specified by HTTP/1.1

   Notes:

   This is an error here that the digest-uri-value is not enclosed in quotation marks'

> 3 the order of parameter seems to have strict rule (username, realm,
> nonce, uri, cnonce, nc, algorithm, response, qop)
> 
> Both IE and firefox follow 1 and 2 but only IE follows 3.

We could try it and see whether all of the stupid software (or at
least most of the stupid software) likes that order.