From ced3092d6a2ea26a094b10ea4ad540e28287fdfc Mon Sep 17 00:00:00 2001
From: Chris Pepper <pepper@apache.org>
Date: Sun, 19 Sep 2004 04:20:37 +0000
Subject: [PATCH]   	Update the description of digest support for 2004,
 adding Konqueror, Mac IE, and Safari as supporting browsers, and lynx as an
 (apparently) non-supporting browser. Confirmation of the official lynx home
 would be welcome -- lynx.browser.org and UKans both have older versions.

  	I *believe* IE/Mac (which has a much different code base than IE/Win) doesn't have the GET bug described on Windows -- at least I can request a URL like "http://myhost/?testing" and successfully log in and get to http://myhost/, but I'm not sure if there's a subtlety I missed. I also alphabetized the (fairly long) list of browsers (keeping Mozilla and Netscape together), and toned down the warning about lack of support, since everything but lynx now seems to handle digest auth.

PR:
Obtained from:
Submitted by:
Reviewed by:


git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@105203 13f79535-47bb-0310-9956-ffa450edef68
---
 docs/manual/mod/mod_auth_digest.xml | 36 ++++++++++++++++-------------
 1 file changed, 20 insertions(+), 16 deletions(-)

diff --git a/docs/manual/mod/mod_auth_digest.xml b/docs/manual/mod/mod_auth_digest.xml
index 94f499eac0b..9d4532eb11d 100644
--- a/docs/manual/mod/mod_auth_digest.xml
+++ b/docs/manual/mod/mod_auth_digest.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0"?>
 <!DOCTYPE modulesynopsis SYSTEM "../style/modulesynopsis.dtd">
 <?xml-stylesheet type="text/xsl" href="../style/manual.en.xsl"?>
-<!-- $Revision: 1.19 $ -->
+<!-- $Revision: 1.20 $ -->
 
 <!--
  Copyright 2002-2004 The Apache Software Foundation
@@ -68,27 +68,31 @@
     </example>
 
     <note><title>Note</title> 
-    <p>Digest authentication provides a more secure password system
-    than Basic authentication, but only works with supporting
-    browsers. As of November 2002, the major browsers that support digest
-    authentication are <a href="http://www.opera.com/">Opera</a>, <a
-    href="http://www.microsoft.com/windows/ie/">MS Internet
-    Explorer</a> (fails when used with a query string - see "<a href="#msie"
-    >Working with MS Internet Explorer</a>" below for a workaround), <a
+    <p>Digest authentication is more secure than Basic authentication,
+    but only works with supporting browsers. As of September 2004, major
+    browsers that support digest authentication include <a
     href="http://www.w3.org/Amaya/">Amaya</a>, <a
-    href="http://www.mozilla.org">Mozilla</a> and <a
-    href="http://channels.netscape.com/ns/browsers/download.jsp"
-    >Netscape</a> since version 7. Since digest
-    authentication is not as widely implemented as basic
-    authentication, you should use it only in controlled environments.</p>
+    href="http://konqueror.kde.org/">Konqueror</a>, <a
+    href="http://www.microsoft.com/windows/ie/">MS Internet Explorer</a>
+    for Mac OS X and Windows (although the Windows version fails when
+    used with a query string -- see "<a href="#msie" >Working with MS
+    Internet Explorer</a>" below for a workaround), <a
+    href="http://www.mozilla.org">Mozilla</a>, <a
+    href="http://channels.netscape.com/ns/browsers/download.jsp">
+    Netscape</a> 7, <a href="http://www.opera.com/">Opera</a>, and <a
+    href="http://www.apple.com/safari/">Safari</a>. <a
+    href="http://lynx.isc.org/">lynx</a> does <strong>not</strong>
+    support digest authentication. Since digest authentication is not as
+    widely implemented as basic authentication, you should use it only
+    in environments where all users will have supporting browsers.</p>
     </note>
 </section>
 
 <section id="msie"><title>Working with MS Internet Explorer</title>
     <p>The Digest authentication implementation in current Internet
-    Explorer implementations has known issues, namely that <code>GET</code>
-    requests with a query string are not RFC compliant.  There are a
-    few ways to work around this issue.</p>
+    Explorer for Windows implementations has known issues, namely that
+    <code>GET</code> requests with a query string are not RFC compliant.
+    There are a few ways to work around this issue.</p>
 
     <p>
     The first way is to use <code>POST</code> requests instead of
-- 
2.47.2