a Secarta project ...

HTTPsec Authentication Protocol


Preamble

6.4. Continuation Request Transcript

The continuation request transcript is an input to mac directive creation and validation. It is itself computed as follows:

request-transcript =                 
    "httpsec/1.0"     || ":"
  || token            || ":"   
  || count            || ":"
  || url              || ":"
  || digest           || ":"
  || Method           || ":"
  || Content-MD5      || ":"
  || Content-Encoding || ":"
  || Content-Range    || ":"
  || Content-Type

where the following apply:

  1. All values are taken from the request.
  2. token, count, url, and digest refer to the protocol directives with those names. They are the directives' literal US-ASCII encoded values exactly as they appear in those headers.
  3. Method is the Method [HTTP][ 5.1.1] from the request's Request-Line [HTTP][ 5.1].
  4. Content-MD5, Content-Encoding, Content-Range, and Content-Type refer to [HTTP][ 4.2] headers. Their values MUST first undergo canonicalization as detailed in the Header Canonicalization section.