Re: [SQU] Limitations

Robert Collins wrote:
>
> When will I learn :-/
>
> rfc 2617 specifies TEXT as the username & password, I just had a nagging suspicion so I looked up the BNF definition for TEXT, which
> excludes LWS.. Sorry Henrik for wasting time...

Hmm.. perhaps you should read the definitions again...

RFC2617:

      user-pass = userid ":" password
      userid = *<TEXT excluding ":">
      password = *TEXT

RFC2616:

       TEXT = <any OCTET except CTLs,
                        but including LWS>

       LWS = [CRLF] 1*( SP | HT )

What can be argued is if any applications will get the witespace
definition correly in this context.. (there is no semantic difference
between any of the LWS combinations. All read as a single SP, but I
doubt any Basic HTTP password implementations will read SP and HT as the
same thing)

--
Henrik Nordstrom
--
To unsubscribe, see http://www.squid-cache.org/mailing-lists.html