Re: [squid-users] "auto-login" problems with newer web browsers

Robert Collins wrote:
> the client doesn't send the http://user:pw@url... to squid,
> it turns it into at least two separate lines:
> GET url HTTP/1.0
> Proxy-Authorization: Basic <encoded user:pw>

Which from the RFC point of view is plain wrong, as the user information
in a Internet style URL is for accessing the resource, not a proxy. See
for example the ftp:// style URL's. However, the URL based user
information is not defined for HTTP URL's, only explicitly defined FTP.

URL defines what a URL is.

Internet class URL defines the overall syntax URL's must follow. This
includes how user information may be encoded as required to gain access
to the resource indicated by the URL.

FTP URLs is a Internet class URL type and define that there may be a
login, and how this is used when accessing the FTP server to gain access
to the URL resource.

HTTP URL's is a Internet class URL type but do not define the use of any
login information in the URL. However, the generic URL specification
clearly specifies this information is for accessing the resource as
such, not any intermediary proxy.

Regards
Henrik
Received on Thu Jan 10 2002 - 03:34:50 MST