RFC 2617, "HTTP Authentication: Basic and Digest Access Authentication", June 1999
Source of RFC: http (app)
⚠ This RFC has been obsoleted!
Obsoleted by: RFC7235, RFC7615, RFC7616, RFC7617
Errata-ID: 1431
- Status:
- Verified
- Type:
- Editorial
- Reported By:
- Stefan Santesson
- Date Reported:
- 2008-05-29
- Verified by:
- Alexey Melnikov
- Date Verified:
- 2009-12-21
Section 3.2.2.1 says:
If the "qop" value is "auth" or "auth-int":
request-digest = <"> < KD ( H(A1), unq(nonce-value)
":" nc-value
":" unq(cnonce-value)
":" unq(qop-value)
":" H(A2)
) <">It should say:
If the "qop" value is "auth" or "auth-int":
request-digest = <"> < KD ( H(A1), unq(nonce-value)
":" nc-value
":" unq(cnonce-value)
":" unq(qop-value)
":" H(A2)
) > <">Notes:
The ">" bracket is missing in the final line, closing the "<" bracket of the first line in "< KD ( H(A1)"...