2009-11-13
Adding a note for possible round trip savings.
| util/sasl/digest-md5.lua | file | annotate | diff | revisions |
1.1 --- a/util/sasl/digest-md5.lua Fri Nov 13 11:24:22 2009 +0100 1.2 +++ b/util/sasl/digest-md5.lua Fri Nov 13 14:31:03 2009 +0100 1.3 @@ -214,6 +214,7 @@ 1.4 KD = HA1..":"..response["nonce"]..":"..response["nc"]..":"..response["cnonce"]..":"..response["qop"]..":"..HA2 1.5 local rspauth = md5(KD, true); 1.6 self.authenticated = true; 1.7 + --TODO: considering sending the rspauth in a success node for saving one roundtrip; allowed according to http://tools.ietf.org/html/draft-saintandre-rfc3920bis-09#section-7.3.6 1.8 return "challenge", serialize({rspauth = rspauth}); 1.9 else 1.10 return "failure", "not-authorized", "The response provided by the client doesn't match the one we calculated."