diff options
| author | Michael Brown | 2018-05-14 12:16:34 +0200 |
|---|---|---|
| committer | Michael Brown | 2018-06-08 14:53:02 +0200 |
| commit | e7f67d5a4c6e9f06aa7a9db1b4245f5e16f00bb2 (patch) | |
| tree | b0c8491fede7301a127214515b4fd17f7ca97296 /src/Makefile.housekeeping | |
| parent | [icplus] Add driver for IC+ network card (diff) | |
| download | ipxe-e7f67d5a4c6e9f06aa7a9db1b4245f5e16f00bb2.tar.gz ipxe-e7f67d5a4c6e9f06aa7a9db1b4245f5e16f00bb2.tar.xz ipxe-e7f67d5a4c6e9f06aa7a9db1b4245f5e16f00bb2.zip | |
[http] Work around stateful authentication schemes
As pointedly documented in RFC7230 section 2.3, HTTP is a stateless
protocol: each request message can be understood in isolation from any
other requests or responses. Various authentication schemes such as
NTLM break this fundamental property of HTTP and rely on the same TCP
connection being reused.
Work around these broken authentication schemes by ensuring that the
most recently pooled connection is reused for the subsequent
authentication retry.
Reported-by: Andreas Hammarskjöld <junior@2PintSoftware.com>
Tested-by: Andreas Hammarskjöld <junior@2PintSoftware.com>
Signed-off-by: Michael Brown <mcb30@ipxe.org>
Diffstat (limited to 'src/Makefile.housekeeping')
0 files changed, 0 insertions, 0 deletions