Skip to main content

An Encoding Parameter for HTTP Basic Authentication
draft-ietf-httpauth-basicauth-enc-01

The information below is for an old version of the document.
Document Type
This is an older version of an Internet-Draft whose latest revision state is "Replaced".
Expired & archived
Author Julian Reschke
Last updated 2014-01-01 (Latest revision 2013-06-30)
Replaces draft-reschke-basicauth-enc
Replaced by draft-ietf-httpauth-basicauth-update, RFC 7617
RFC stream Internet Engineering Task Force (IETF)
Formats
Additional resources Mailing list discussion
Stream WG state WG Document
Document shepherd (None)
IESG IESG state Expired
Consensus boilerplate Unknown
Telechat date (None)
Responsible AD (None)
Send notices to (None)

This Internet-Draft is no longer active. A copy of the expired Internet-Draft is available in these formats:

Abstract

The "Basic" authentication scheme defined in RFC 2617 does not properly define how to treat non-ASCII characters. This has led to a situation where user agent implementations disagree, and servers make different assumptions based on the locales they are running in. There is little interoperability for the non-ASCII characters in the ISO-8859-1 character repertoire, and even less interoperability for any characters beyond that. This document defines a backwards-compatible extension to "Basic", specifying the server's character encoding scheme expectation, using a new authentication scheme parameter.

Authors

Julian Reschke

(Note: The e-mail addresses provided for the authors of this Internet-Draft may no longer be valid.)