jvasileff commented on PR #467:
URL: 
https://github.com/apache/httpcomponents-client/pull/467#issuecomment-1642906161

   Ah, yes, thanks. It looks like RFC 7616 obsoletes 2617.
   
   In RFC 7616, relevant quotes from *3.4 The Authorization Header Field* 
supporting this change are:
   
   > The values of the opaque and algorithm fields must be those supplied in 
the WWW-Authenticate response header field for the entity being requested.
   
   and
   
   > For historical reasons, a sender MUST NOT generate the quoted string 
syntax for the following parameters: algorithm, qop, and nc.
   
   The second note about quoting is only relevant in that it rules out other 
potential changes - this PR makes no changes to quoting; the algorithm value is 
still produced without `"` tokens.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to