[Webkit-unassigned] [Bug 31634] New: Ignore realm for proxy protection spaces

[bugzilla-daemon at webkit.org]

https://bugs.webkit.org/show_bug.cgi?id=31634

           Summary: Ignore realm for proxy protection spaces
           Product: WebKit
           Version: 528+ (Nightly build)
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: Normal
          Priority: P2
         Component: Platform
        AssignedTo: webkit-unassigned at lists.webkit.org
        ReportedBy: ap at webkit.org


Realm makes no sense for HTTP(S) proxy authentication. It is not even set in
NSURLAuthenticationChallenge's protection space that is sent for HTTP.

This makes it difficult to use stored credentials for Web Socket, as servers so
actually send realms for proxy auth. One solution is to not set realm when
creating a ProtectionSpace object for proxy auth. I think it would be even
better to treat proxy protection spaces with different realms.

One related data point: it looks like the realm isn't stored in Keychain, even
for non-proxy credentials.

-- 
Configure bugmail: https://bugs.webkit.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.