[whatwg] Solving the login/logout problem in HTML

[Julian Reschke]

Ian Hickson wrote:
>>>   challenge = "HTML" [ form ]
>>>   form      = "form" "=" form-name
>>>   form-name = quoted-string
>> RFC2617 states that "The realm directive (case-insensitive) is required 
>> for all authentication schemes that issue a challenge."
> 
> I didn't really understand how the realm would work here, which is why I 
> didn't include it. Is this a case where we should violate RFC2617? (Note 
> that we're in a rather unusual case here because the challenge never gets 
> a reply in the traditional sense.)

Unless there's an ultra-important reason to violate any base 
requirements, I would advise against it.

BR, Julian