<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"> <html> <head> <meta http-equiv="Content-Type" content="text/html;charset=ISO-8859-1"> <title></title> </head> <body> Peter Saint-Andre wrote: <blockquote type="cite" cite="mid20040112175133.GM20035@jabber.org"> <pre wrap="">On Mon, Jan 12, 2004 at 10:07:18AM +0300, Alexey Nezhdanov wrote: </pre> <blockquote type="cite"> <pre wrap="">Hello. Recently tryed to use SASL against ejabberd. Found several differences: 1) challenge responces. jabberd2 response: realm="jabber.penza-gsm.ru",nonce="baca3d3c76bab6edb7d7f2736733cf63300f9595",qop=auth,charset=utf-8,algorithm=md5-sess ejabbed response: nonce="1303694217",qop="auth",charset=utf-8,algorithm=md5-sess The main problem is that double quotes appears in one case and disappears in the another. The worst problem that I can't find out which case is proper. </pre> </blockquote> <pre wrap=""> Yes, RFC 2831 is ambiguous on this. I will try to find out what is right. It could be that the double-quotes are optional. </pre> </blockquote> My opinion is that values MUST be quoted when the value is string (variable that can not be predicted) and MUST NOT be quoted when the value is "one of pre-defined values". F.e. qop may be one of "auth", "auth-int", "auth-conf", "token" so MUST NOT be quoted. -- Respectively Alexey Nezhdanov. </body> </html>