Re: authentication scope with persistant connections

Mark Baker <[email protected]> Sat, 1 Jun 2002 21:23:10 -0400

Newsgroups	gmane.comp.web.general
Message-ID	<[email protected]>

Hi Simon,

On Sat, Jun 01, 2002 at 03:45:12PM -0700, Simon Fell wrote:
> 
> Hi,
> 
> I'm trying to work out how authentication and persistent connections
> interact. I initially thought that the authentication header will only
> apply to the scope of that particular HTTP exchange, however I'm
> seeing with IIS that subsequent requests on the same connection
> continue to be treated as authenticated even if the following request
> doesn't specify an authentication header. 
> 
> Can anyone clarify what the expected behavior should be ?

If that's what's happening, IIS is broken.  The connection style
doesn't impact the statelessness of the interaction.

Are you sure that's what you're observing?

MB
-- 
Mark Baker, CTO, Idokorro Mobile (formerly Planetfred)
Ottawa, Ontario, CANADA.               [email protected]
http://www.markbaker.ca        http://www.idokorro.com