-
Type: Bug
-
Status: Closed
-
Priority: Minor
-
Resolution: Fixed
-
Affects Version/s: None
-
Fix Version/s: None
-
Component/s: REST/AtomPub Binding
-
Labels:None
-
Proposal:
Line 53 - CMIS requires HTTP Basic auth. But AtomPub requires (MUST) at least Basic plus TLS.
Relevant AtomPub section 14:
"...At a minimum, client and server
implementations MUST be capable of being configured to use HTTP Basic
Authentication [RFC2617] in conjunction with a connection made with
TLS 1.0 [RFC2246] or a subsequent standards-track version of TLS
(such as [RFC4346]), supporting the conventions for using HTTP over
TLS described in [RFC2818]."