Date: Wed, 29 May 1996 12:52:11 -0700 (PDT)
From: Alexei Kosut <akosut@nueva.pvt.k12.ca.us>
To: jk@tools.de
Cc: new-httpd@hyperreal.com
Subject: Re: WWW Form Bug Report: "mod_digest.c performs too many auth checks"
 on Solaris 2.x (fwd)
In-Reply-To: <Pine.SOL.3.91.960529114914.2482B-100000@bauhaus.organic.com>
Message-Id: <Pine.HPP.3.93.960529124923.11891A-100000@ace.nueva.pvt.k12.ca.us>
Mime-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-new-httpd@apache.org
Precedence: bulk
Reply-To: new-httpd@hyperreal.com

On Wed, 29 May 1996, jk@tools.de wrote:

> digest_check_auth performs auth checks for 
> requests that do not use "Digest" authorization:

[snip]

> I think digest_check_auth should first make sure
> that the request really uses "Digest" Authorization
> before checking anything.

Thanks for the bug report and the patch. We'll take a look at it, and
consider it for inclusion in the next release of Apache, but at a
first glance, you appear to be correct.

Thanks for using Apache!

-- 
________________________________________________________________________
Alexei Kosut <akosut@nueva.pvt.k12.ca.us>      The Apache HTTP Server
URL: http://www.nueva.pvt.k12.ca.us/~akosut/   http://www.apache.org/
 
      "War does not determine who is right, only who is left."